Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page
Web Security Deployment Recommendations > Hardware recommendations for standalone Web Security deployments
Hardware recommendations for standalone Web Security deployments
Deployment and Installation Center | Web Security Solutions | Version 7.7.x
 
Applies to:                                         
*
Web Filter and Web Security, v7.7.x
In standalone deployments, Network Agent (rather than Content Gateway or a third-party integration product) monitors network traffic and enables filtering of all protocols, including HTTP, HTTPS, and FTP.
In a standalone deployment, one or more Network Agent instances:
*
Detects all TCP/IP Internet requests (HTTP and non-HTTP)
*
Communicates with Filtering Service to see if each request should be blocked
*
Calculates the number of bytes transferred
*
Sends a request to Filtering Service to log Internet activity
The table below provides hardware recommendations for standalone deployments, based on network size. System needs vary depending on the volume of Internet traffic. The table does not include information for the TRITON management server (see System requirements for this version).
The following baseline is used to create the recommendations:
*
1 - 500 users = 1 - 100 requests per second (rps)
*
500 - 2,500 users = 100 - 500 rps
*
2,500 - 10,000 users = 500 - 2,250 rps
 
* 
Important 
*
Do not install Websense components on a firewall machine. Firewall and Websense software function and performance may be affected.
*
Each Network Agent machine must be positioned to see all Internet requests for the machines that it is assigned to monitor.
*
eDirectory Agent or RADIUS Agent can be installed on the same machine as Filtering Service, or on a separate machine in the same network, but not on the same machine as Websense Log Server.
If your network traffic exceeds these estimates, more powerful systems or greater distribution of components may be required.
 
Network Size
Filtering Components
Reporting (Windows)
1 - 500 users
Windows or Linux
*
Quad-Core Intel Xeon 5420 or better processor, 2.5 GHz or greater
*
4 GB RAM
*
10 GB free disk space
(Free space must equal at least 20% of total disk space.)
Windows
*
Quad-Core Intel Xeon 5420 or better processor, 2.5 GHz or greater
*
4 GB RAM
*
100 GB free disk space
*
Microsoft SQL Server 2008 or 2005, or SQL Server 2008 R2 Express required for Log Database
500 -
2,500 users
Windows or Linux
*
Quad-Core Intel Xeon 5420 or better processor, 2.5 GHz or greater
*
4 GB RAM
*
10 GB free disk space
(Free space must equal at least 20% of total disk space.)
Windows
*
Quad-Core Intel Xeon 5420 or better processor, 2.5 GHz or greater
*
4 GB RAM
*
100 GB free disk space
*
Microsoft SQL Server 2008 or 2005, or SQL Server 2008 R2 Express required for Log Database
2,500 -
10,000 users
Windows or Linux
*
Load balancing required
*
Quad-Core Intel Xeon 5450 or better processor, 3.0 GHz or greater
*
4 GB RAM
*
10 GB free disk space
(Free space must equal at least 20% of total disk space.)
Windows
*
Quad-Core Intel Xeon 5420 or better processor, 2.5 GHz or greater
*
4 GB RAM
*
200 GB free disk space with a disk array
(The Log Database requires a disk array to increase I/O reliability and performance.)
*
High-speed disk access
*
Microsoft SQL Server 2008 or 2005 required for Log Database
To run both filtering and reporting on the same machine in the two smaller network sizes, increase the RAM to 6 GB (if supported by your operating system), and consider using a faster processor and hard drive to compensate for the increased load.
For networks with 2,500-10,000 users, at least two Network Agent instances, running on separate machines, are required. The machines should have:
*
Quad-Core Intel Xeon 5420 or better processor, 2.5 GHz or greater
*
At least 1 GB of RAM
Multiple Filtering Service machines may also be needed. Machine requirements depend on the number of users being monitored and filtered.

Go to the table of contents Go to the previous page Go to the next page
Web Security Deployment Recommendations > Hardware recommendations for standalone Web Security deployments
Copyright 2016 Forcepoint LLC. All rights reserved.