IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  QRadar on Cloud Data appliance

    Posted Fri June 21, 2019 10:35 AM
    Hi,

    I have procured a IBM Cloud Subscription and installing my gateway appliances. I have planned to install 4 data appliances..3 On-Prem DCs and one in Azure. If one of my on-prem appliance goes down, can I configure a fail over to Azure gateway appliance and vice-versa?
    If yes, how do I do that?

    Thank you,
    Sushanta

    ------------------------------
    Sushanta Sena
    ------------------------------


  • 2.  RE: QRadar on Cloud Data appliance

    Posted Mon June 24, 2019 03:38 PM
    Hi Sushanta Sena,
    In general, automatic failover for the Data gateways is not supported.
    However, you may be able to put together some sort of an administrative process  on your end that does the switch, similar to a DR procedure.
    Regards,
    Sree

    ------------------------------
    SREE ANANTHASAYANAM
    ------------------------------

    Original Message


  • 3.  RE: QRadar on Cloud Data appliance

    Posted Thu June 27, 2019 02:00 AM
    Hi Sree,

    Thank you for the response. Do you have any documentation from QRoC on the failover/ DR fror the data gateways?
    If I consider for an administrative process for manually configure failover after one of the data gateways goes down, do I need to open ports from all the log sources to the Azure data gateway where I have planned to host the failover service. Can I configure it from the QRoC console or do I need to go to each log sources those are sending logs to the gateway which has issues?


    Regards,
    Sushanta

    ------------------------------
    Sushanta Sena
    ------------------------------

    Original Message