Support Center > Search Results > SecureKnowledge Details
SmartEvent Sizing Guide - R77.x
Solution

This Sizing Guide refers to SmartEvent R77.x and older versions.

 

To find the suitable SmartEvent appliance, get the scale estimations for your environment by running the CPLogInvestigator Sizing Tool on the Log Server.

  1. Download the CPLogInvestigator.tgz and extract it to /var/log directory on SmartEvent Sever:
    #cd /var/log
    # gtar -zxvf CPLogInvestigator.tgz
    # chmod 777 *
  2. Run CPLogInvestigator -h for usage instructions. 
  3. Run the CPLogInvestigator tool with the required arguments:
    # ./CPLogInvestigator -a -p > /var/log/CPLogInvestigator.txt
  4. Compare the output with the table below.

This is the supported scale for Smart-1 SmartEvent appliances:


Smart-1 5 SmartEvent Smart-1 25 SmartEvent Smart-1 50 SmartEvent

Logs analyzed per day (file size)

2GB 10GB 25GB

Maximum Events per day*

250K 500K 1,000K - 5,000K**

Supported Users*

900

3K

7K - 80K**

Available storage for historic records*** 315 GB 720 GB 1,200 GB

* Remarks:

  • Enabling SmartReporter on the appliance reduces the supported scale by half.
  • Read sk80720 for advanced tuning suggestions to maximize performance.

** The upper limit can be reached by extending RAM to 16GB:

  • If Application Control and URL Filtering blades are activated - 20K users are supported.
  • If Application Control and URL Filtering blades are not activated - 80K users are supported.

*** To evaluate the number of historic days to keep, divide the available storage by the estimated daily consumption reported by the Sizing Tool.

 

This scale requires SmartEvent version of:

  • R75.45 + performance hotfix (see Installation Instructions below)
  • R75.46
  • R76
  • Any version above R76

Note: SmartEvent can run with different versions than the Security Management server. Then SmartEvent server can be upgraded to one of the above versions without upgrading the Security Management server.

 

For SmartEvent NGSE Sizing Table refer to sk98767.


 

Performance improvement hotfix for R75.45 - Installation Instructions:

  1. Download and copy the SmartEvent R75.45 Performance Improvement Hotfix package to SmartEvent R75.45 server.
  2. Extract the hotfix:
    gtar xzvf ReportingServer_HOTFIX_FOXX_HF_HA45_010.tgz
  3. Run cpstop
  4. Install the hotfix:
    ./ReportingServer_HOTFIX_FOXX_HF_HA45_010_986010007_1
  5. Run cpstart

Notes:

  • This hotfix package is suitable for Gaia / SecurePlatform / Linux OS.
  • It can be installed on both Check Point appliances and Open Servers.
  • To download this package, you will need to have a Software Subscription or Active Support plan.
Applies To:
  • merged with sk122216

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment