SmartEvent R80.30 on Open Server sizing recommendations

[Peter_Janum_Sod]

Hi CheckMates.

I have a customer planning to deploy SmartEvent on an Open Server (VMware). It will be connected to a Multi Domain Server R80.30 and receive logs from approximately 45 gateways with IPS enabled.

Now the customer ask how to do the initial sizing of the server regarding CPU and RAM.

I am only able to find sizing guide for Smart-1 appliances, but no guidelines or recommendations for an Open Server.

Can anyone help with information on how to assist the customer with sizing an Open Server for Smartevent? I know we need a lot more information about logs per minute etc. to give a good answer, but just to have an idea where to start would be great.

Thank in advance!

Best Regards

Peter Sode

[Chris_Atkinson · Accepted solution]

As a starting point align the specs with the equivalent Smart-1 appliance, then increase memory and ensure dedicated resources are available to the VM. Refer also: https://sc1.checkpoint.com/documents/R80.10/Performance/R80.10-performance-guide.html

[_Val_]

There is open server and vmware. For the latter, we have a thorough SK documenting performance related parameters of the VM: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Timothy_Hall]

In a VMWare environment, disk path speed is usually the biggest bottleneck you will encounter.  It is worth it to upgrade to the fastest disks/controllers you can and ensure they are dedicated to the SMS/MDS, and not shared with other VMs that are disk I/O intensive.  For CPU and RAM I'd say at least 16 cores and at least 64GB of RAM, however these two specs will be driven by the number of Domains/CMAs.