SmartEvent - Cloud or On-premise?

[Robin_H]

Hi!

I have a management server on a VM, around 40 firewalls, no multi-Domain, R81.10.  First log target is an old SmartEvent appliance which is approaching EOL. 

Any particular advantage replacing the existing appliance with a proper amount of Smart-1 Cloud license rather than just getting a 600-M?

I don’t mind the occasional manual patching. Daily Log volume is no issue and the price also does not give a clear direction. 
Biggest drawback I see is that the cheapest cloud offer only has 3 month retention (log volume?!). In some scenarios I’d like to look further into the past (6 to 8m).

Management from the cloud is no option at the moment as I deploy a customized crypt.def through the management server (and access to files is apparently not possible in Cloud Management).

What’s your experience/thoughts?

[the_rock]

Personally, considering that most things these days are gearing up towards the cloud, thats the option I would strongly consider. I heard you can get real good deal, plus, compared to few years ago, portal came a long way, for the better, that is.

Just my personal opinion.

Btw, dont be afraid of custom .def files, super easy nowdays in the cloud, you can as a matter of fact upload them yourself, same way you can say customize endpoint package using trac.config in harmony endpoint portal. I know lots of people used to freak in the old days when they hear no ssh in the cloud. Well, now no one even cares lol

Best,

Andy

[emmap]

I don't think you can link traditional SMS to Smart-1 Cloud SME, but you can certainly spun up your own cloud hosted VM for SME with all the disk space you need for log retention. 

[PhoneBoy]

With Smart-1 Cloud, if you need changes to .def files, TAC can do it for you.
You can also purchase additional retention time, I believe.

[the_rock]

Forgot to ask this yesterday...I know few years ago, you could request to have smart event capabilities enabled on S1C mgmt, but was somewhat limited. Is it different now?

Best,

Andy

[PhoneBoy]

Smart-1 Cloud does offer SmartEvent, though it must be purchased.
There are other SKUs to increase the log/event storage limit and retention time.

[the_rock]

Understood, thank you.

[G_W_Albrecht]

I would rather deploy a new SmartEvent server as a VM... Makes backup and HA easy if you can rely on the VM infrastructure.

[the_rock]

Sounds logical.