系統需求
McAfee Enterprise Log Manager 可部署為實體或虛擬裝置。 特定 McAfee Enterprise
Log Manager 模型需要 McAfee Enterprise Security Manager (ESM) 與 McAfee
Event Receiver (ERC)。 McAfee SIEM
裝置規格和描述僅供參考，並且不包含任何明示或暗示的保證，如有變更，恕不另行通知。
|
Model Number |
Maximum EPS1 |
Appliance Size |
Local Storage2 |
Network Interfaces (10/100/1000) |
System Requirements |
| ELM-VM-8 |
1,500 |
VM |
Recommended 250GB |
VM (AWS, ESX, KVM) |
8 processor cores, 4GB of memory |
| ELM-VM-12 |
30,000 |
VM |
Recommended 500GB+240GB SSD3 |
VM (AWS, ESX, KVM) |
12 processor cores, 64GB of memory |
| ELM-VM-32 |
70,000 |
VM |
Recommended 2TB+480GB SSD3 |
VM (AWS, ESX, KVM) |
32 processor cores, 96GB of memory |
| ELM-4600 |
48,000 |
2U |
1.8TB |
24 |
Requires ESM and ERC |
| ELM-5600 |
60,000 |
2U |
8TB + 240GB SSD |
24 |
Requires ESM and ERC |
|
ELM-6000 |
90,000 |
2U |
14TB + 240GB SSD |
24 |
Requires ESM and ERC |
1Based on typical network environments using
average event and flow aggregation. Depending on aggregation
settings, collection type mix, overall SIEM activity, and related
activities, the EPS levels for any given appliance, within an
environment, may be lower.
2Usable event and flow data storage capacity will vary by
customer event types, event rates, software version, and other
factors.
3Minimum 50K IOPS for SSD; additional storage should be a
minimum of 100 IOPS.
4IPMI: Please note that all McAfee SIEM appliances,
except DAS-50 and DAS-100, have IPMI adapters; for ERC HA, IPMI is
used for the HA configuration.
