IBM Security QRadar

 View Only
  • 1.  Qradar Azure Market place for all-in-one appliance deployment

    Posted Wed May 06, 2020 08:19 AM
    Hi,

    please suggest which option for Qradar all-in-one appliance deployment in a azure cloud environment.
    I can see three options on azure market place.

    1. QRadar SIEM Console 7.3.3
    2. QRadar SIEM AH 7.3.3
    3. QRadar SIEM MH 7.3.3

    on Azure market place it not mentioned and even looking at option three QRadar SIEM MH 7.3.3. there is no option for all-in-one appliance id.

    Appliance type ID Appliance type
    1299 Flow Collector
    1400 Data Node
    1599 Event Collector
    1699 Event Processor
    1799 Flow Processor
    1899 Event and Flow Processor


    ------------------------------
    KUNWAR SINGH
    ------------------------------


  • 2.  RE: Qradar Azure Market place for all-in-one appliance deployment
    Best Answer

    Posted Wed May 06, 2020 08:25 AM
    Option 1 is the Console which is an All-in-one. A console is always an all-in-one as it can perform all tasks, whether it has a managed host or not.


  • 3.  RE: Qradar Azure Market place for all-in-one appliance deployment

    Posted Wed May 06, 2020 08:36 AM
    Thanks Paul,
    one more question regarding Qradar Azure Market Place. I can see another option for Qradar deployment QRadar SIEM (BYOL).
    As I understood this the same but only difference is Qradar version. is this correct?



    ------------------------------
    KUNWAR SINGH
    ------------------------------



  • 4.  RE: Qradar Azure Market place for all-in-one appliance deployment

    Posted Wed May 06, 2020 08:39 AM
    It's the same, but you have to "bring your own license" file.

    Regards,

    ------------------------------
    Darren H.
    ------------------------------



  • 5.  RE: Qradar Azure Market place for all-in-one appliance deployment

    Posted Wed May 06, 2020 08:52 AM
    Thanks Darren,

    I think in both cases" bring your own license" file. only difference is version

    IBM QRadar SIEM v7.3.3 (BYOL)
    QRadar SIEM (BYOL) (QRadar Console v7.3.1 Patch 4 Interim Fix )1





    ------------------------------
    KUNWAR SINGH
    ------------------------------