Overview
Size Cyber Vision Centers by considering component count, stored flows, Sensor count, Center DPI, retention, replay behavior, growth, FIPS mode, and VM or cloud requirements.
Use the sizing factors and starting points in this topic to define the initial deployment size.
Workload sizing factors
Component count.
Flow volume.
Sensor count.
Center DPI usage.
Snort IDS usage.
Retention duration.
Outage replay behavior.
Deployment sizing factors
Expected growth over 12 to 24 months.
FIPS or non-FIPS deployment mode.
Cloud-specific sizing requirements.
| Center tier |
Scale point |
CPU |
RAM |
Storage and platform |
|---|---|---|---|---|
| Mid-size Center VM |
Up to 20,000 components and 150 Sensors without Center DPI |
16 cores |
64 GB |
1 TB NVMe storage with validated or provisioned IOPS |
| Large Center or Center DPI deployment |
Up to 70,000 components, 400 Sensors, and 21 million stored flows, or any Center deployment with Center DPI |
32-core AMD or equivalent CPU resources |
192 GB |
CV-CNTR-M8 with two or four 1.6 TB NVMe drives, or an equivalent VM storage profile with NVMe performance |
Center VM equivalency
For a non-cloud Center VM, use only the Center sizing points in this topic unless the target deployment is covered by a cloud-specific sizing table.
A VM that is equivalent to the CV-CNTR-M8 must provide the same CPU resources, RAM, and disk performance as the appliance. NVMe-class storage is mandatory for the 70,000-component Center scale point.
CVSM sizing
Size CVSM separately from Center and Global Center workloads.
A CVSM VM with 8 vCPUs and 16 GB RAM can manage up to 100 enrolled Centers. The maximum supported limit is 100 enrolled Centers per CVSM VM; allocating additional CPU or memory does not increase this limit.
Global Center scope
For Global Center deployments, use CV-CNTR-M6N or VM resources equivalent to M6N to support up to 20 registered Centers and 150,000 synced components. Do not use Center component-count tiers to size Global Center.
Cloud-specific scope
Cloud tier values are cloud-specific. Do not use an AWS, Azure, or Google Cloud table as a universal VM sizing table.
For VMware ESXi, Hyper-V, Nutanix AOS, or cloud deployments, use the Release 5.5.x installation and compatibility documentation before final sizing.
Center DPI planning
A Center deployed with the CV-CNTR-M8N profile, or an equivalent CV-CNTR-M8-sized Center VM, supports up to four DPI interfaces.
Each DPI interface supports up to 300,000 packets per second (pps). Size DPI capacity per interface and keep steady-state load below 70 to 80 percent of the validated capacity.