Re: Design and Hardware.

["Al Lewis (allewi)" <allewi () cisco com>]

Hello,

Your network topology and the amount of traffic you see on your network is more of a factor than how many users. The 
amount of traffic each sensor sees will dictate the type of hardware (cpu, memory, disk space etc) you need.

Snort runs well on your average x86 hardware so as long as the box itself isn't oversubscribed it will do just fine.

Worst case scenario we will be happy to sell you a few sensors as well as some ASA's to replace those Fortinet 
firewalls (  shameless sales pitch fail! :) ).

Either way let us know how it goes and if you have any questions once you get going send them in!

Hope this helps!

Albert Lewis
QA Software Engineer
SOURCEfire, Inc. now part of Cisco
9780 Patuxent Woods Drive
Columbia, MD 21046
Phone: (office) 443.430.7112
Email: allewi () cisco com

From: Binde Dig [mailto:bindedig () gmail com]
Sent: Thursday, April 02, 2015 12:34 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Design and Hardware.

My company wants to install a modern security solution and it has been suggested that we use SNORT for the IDS solution.
We have about 200 users and 8 VLANs segmenting users ,servers, DMZ, video conf as well as VOIP. We are running Fortinet 
Firewalls and have a 100meg internet uplink.
What we are looking for is how many sensors do we need and what kind of server do we need and what kind of space, 
memory and proc power do we need?
Any suggestions would be great. Oh, we want to run it on a Windows platform (yes I know Unix based is better) but that 
what the company wants.
Thanks,
Steve

------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!