Firewall Analyzer - Sizing Guide

This section lists the minimum system requirements for installing and working with Firewall Analyzer. Please refer our website for recommended system requirements.

Firewall Analyzer Version 12 onwards

1. Hard disk space required
2. Firewall Configurations Storage Requirement
3. Performance tuning - Hard disk requirements for more months

Hard disk space required

*The disk space and RAM size requirements depends on the number of devices sending log information to Firewall Analyzer, the number of firewall log records received per second by Firewall Analyzer. 

Hard disk space requirement

The table below shows the total storage requirements for the database and log storage (archives and index logs).

These values represent PostgreSQL storage requirements specifically for Syslog data.

Firewall Configurations Storage Requirement

When a device rule is configured, configuration or rule changes are fetched from the firewall devices. These configuration changes are stored in the database.

For example, assume the firewall configuration file size is 10 MB and 10 configuration changes occur per day.

In this case:

• One row consumes 15 MB
• 10 changes per day = 150 MB
• Add buffer size = 10 MB
• Total = 175 MB per day

This data will be stored in the database and will contribute to the overall DB size.

Performance tuning

Hard disk requirements for more months

•  Dedicated machine has to be allocated to process more than 200 logs per second.
• Dual core processors are needed to process more than 500 logs per second.
• Quadra core processors are needed to process more than 1000 logs second.
• Number of firewalls handled by the Firewall Analyzer will increase the requirement of the above RAM values. So it is better to have RAM value higher than the suggested value in case of having more than 5 firewalls.
• Firewall Analyzer server and PostgreSQL database can be installed in separate machines, in case of higher log rate with low-end CPU machines.
• The above Hard Disk space requirement projected is for one month. If you need to archive the logs for more number of months, multiply the above requirements with the number of months based on your requirement.