IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  New Qradar Installation & Requirements

    Posted 21 hours ago

    Hi guys,

    I will be setting up a new installation with 25-30,000 EPS. Which version would you recommend for this installation? We are currently using 7.5.0 UP7 in general. Additionally, what are the system requirements for an environment with this EPS? 

    Thanks in advance



    ------------------------------
    Adem Güler
    ------------------------------


  • 2.  RE: New Qradar Installation & Requirements

    Posted 20 hours ago

    Good day,

    As far as hitting a specific performance target goes, any recent version will do as long as you follow the documented guidance for sizing. Will this be on virtual machines?

    However, for a new installation I would highly recommend going with the latest (7.5.0 UP14) since it will have all the latest security and bug fixes. Also there are some attractive new features in UP14. I would also recommend upgrading any existing deployments to UP14 or at least UP13 since only the latest UP will have up to date security fixes. UP7 is very old indeed.



    ------------------------------
    Rory Bray
    Security and Compliance Architect, Threat Management
    IBM
    ------------------------------



  • 3.  RE: New Qradar Installation & Requirements

    Posted 19 hours ago

    @Rory Bray,

    Thank you for your response. Yes, it will be a virtual machine. I am considering two collectors for these EPS values for redundancy. Do you think an EP is necessary? What architecture would you recommend?



    ------------------------------
    Adem Güler
    ------------------------------