If you have a Smart-1 and are looking to migrate into VMWare, the process is the following with your reseller:
1) Say that you want to "turn in" your Smart-1 and associated licensing. What rate you will get for this will depend on various promotions that are in effect.
2) This will create some level of credit that can be used to offset the purchase of a new open server SMS license. The cost drivers of this license will be:
- How many gateways you need to manage with the new SMS
- Whether you want to do more than one domain/CMA (a.k.a. Provider -1/MDMS)
- Any special add-ons (separate correlation units, separate log servers, ability to manage an unlimited number of gateways, etc.)
3) So for example the lowest SMS license you could purchase is:
CPSM-NGSM5 - Next Generation Security Management Software for 5 gateways (SmartEvent & Compliance 1 year)
next up the chain is:
CPSM-NGSM10 - Next Generation Security Management Software for 10 gateways (SmartEvent & Compliance 1 year)
These both include the following management blades which should be all you need, it is rare to need any add-ons:
Including Blades: Network Policy Management, Endpoint Policy Management, Logging and Status, Monitoring, SmartWorkflow, SmartProvisioning, User Directory, Management Portal, SmartEvent for 1 year, Compliance for 1 year.
4) As far as VM resource provisioning, if you can swing it I'd recommend at least 8 cores and 16GB RAM (32GB of RAM if you have a large configuration or more than 10 gateways). However the most important factor for virtualized SMS performance is disk I/O speed. Having your SMS share a disk channel with 50 database VMs that are also pounding that same disk channel will lead to absolutely terrible SMS performance, no matter how many cores and how much RAM you allocate. Talk to your VM guy, usually there is a choice of different physical disk paths for your new VM, you want to be on the one that is fastest and/or least loaded. Trust me on this one. There are a few extra optimization strategies here as well: sk104848: Best Practices - Performance Optimization of Security Management Server installed on VMwar....
Updated 2023 IPS/AV/ABOT R81.20 Course now
available at maxpowerfirewalls.com