topic Re: Using Smart-1 600-M Plus as a dedicated log server in Firewall and Security Management

Using Smart-1 600-M Plus as a dedicated log server

Häggström — Mon, 21 Nov 2022 14:56:46 GMT

Maby im overthinking this but consider the following hardware:

Smart-1 600-M Plus Security Management, Log and SmartEvent appliance for 50 gateways (SmartEvent & Compliance 1 year) CPAP-NGSM600M-PLUS

Can this be used as a dedicated Logserver ? ( not using its included managment and other blades )

Scenario is that we have an existing enviroment with existing managment and gateways where that uses a dedicated software log server in a vmware enviroment and, if possible we would like to decomision the existing logserver and move to the Smart-1 appliance while still keep the existing managment

thanks

/joakim

Re: Using Smart-1 600-M Plus as a dedicated log server

PhoneBoy — Mon, 21 Nov 2022 22:15:53 GMT

TL;DR: Yes.

We sell the Smart-1 600M Plus as a dedicated Log Server/SmartEvent under the SKU: CPAP-NGSM600M-PLUS-EVNT
The differences between this SKU and CPAP-NGSM600M-PLUS are:

Network Management is not included in CPAP-NGSM600M-PLUS-EVNT
SmartEvent is licensed perpetually on the dedicated model (versus paying an annual subscription for it)

Both models can be used as a dedicated log server.

Re: Using Smart-1 600-M Plus as a dedicated log server

the_rock — Mon, 21 Nov 2022 22:31:50 GMT

I know customer who used it for that purpose. Personally, I would not bother, UNLESS you have lots of logs daily and I mean A LOT : - )

Re: Using Smart-1 600-M Plus as a dedicated log server

Häggström — Tue, 22 Nov 2022 08:05:59 GMT

Thank you very much

Re: Using Smart-1 600-M Plus as a dedicated log server

Häggström — Tue, 22 Nov 2022 08:07:56 GMT

Thank you, i imagine that they will be very well set up on the log-part with this box going forward then 🙂

Re: Using Smart-1 600-M Plus as a dedicated log server

George_Ellis — Tue, 22 Nov 2022 16:43:45 GMT

@the_rock wrote:
I know customer who used it for that purpose. Personally, I would not bother, UNLESS you have lots of logs daily and I mean A LOT : - )

LOL. We have 3 5150s and they are too small. Moving to 2 6000-XLs. Generate over 150 GB of logs and index files a day.

Re: Using Smart-1 600-M Plus as a dedicated log server

George_Ellis — Tue, 22 Nov 2022 17:46:07 GMT

I have yet to work for a company that did not have dedicated log servers. There are usually a pair. They can be geo located with managed logging to balance network traffic. As a pair, you will have automatic log forwarding to the other log server if one is unavailable. With a single, if the log server is down, the gateways save the logs and forward them when the log server is back online. With a single log server, you may want to pay more attention to the log retention on the gateways setup.

Re: Using Smart-1 600-M Plus as a dedicated log server

the_rock — Tue, 22 Nov 2022 17:01:37 GMT

Well, that is A LOT x 100, HAHA.