ENSSP for Dell Powerscale (OneFS v9.1)

[Snowball1014]

I have some clarification on how the ENSSP architecture works and how the deployment would be.

1. About the number of AV Scanner, if we have Dell Powerscale (OneFS v9.1) 80TB - 4 nodes, we need at least 8 AV Physical Scanner to be installed to cover the expected load?

2. With regards on the AV Physical scanner, I’d like to confirm my understanding. Each physical scanner is pertaining to a dedicated server appliance?

3. If pt 2 is correct, I assume customer need an operating system and w/ Trellix Agent and ENSSP licenses for each physical scanner. Is this correct?

4. What is the recommended hardware specifications for the AV physical scanner?

5. Is CAVA supported in ENSSP?

[Pravas]

Hi @Snowball1014 ,

Please find my response below.

1. About the number of AV Scanner, if we have Dell Powerscale (OneFS v9.1) 80TB - 4 nodes, we need at least 8 AV Physical Scanner to be installed to cover the expected load?

Ideally we suggest assigning 2 Scan Servers per Node. So yes, you may start with 8 ENSSP Scan servers.

2. With regards on the AV Physical scanner, I’d like to confirm my understanding. Each physical scanner is pertaining to a dedicated server appliance?

I guess there's a concept of Scanner Pools, where a filer is updated with a set of Scan Servers it can use. Perhaps its possible to define all 8 Scan Servers for the nodes or assign dedicated servers for each nodes.

3. If pt 2 is correct, I assume customer need an operating system and w/ Trellix Agent and ENSSP licenses for each physical scanner. Is this correct?

Yes, you would need licenses for Trellix Agent & ENSSP. Please reach out Sales/Account Manager to discuss about it.

4. What is the recommended hardware specifications for the AV physical scanner?

You may start with 4 CPUs & 4GB ram for each Scan Servers.

5. Is CAVA supported in ENSSP?

No. There's another solution called ENS for CAVA. You can read more about it in the link below.

https://kcm.trellix.com/corporate/index?page=content&id=KB88973

Thanks

[Snowball1014]

Hi Prava - thanks for the inputs.

For pt.4, can you advise the recommended storage capacity? Also, can you also advise the OS of the server for AV Scanner. Can we just follow the specified OS version on this KB - https://kcm.trellix.com/corporate/index?page=content&id=KB94811

For pt.5, is the KB you shared can be use for the Dell Powerscale (OneFS v9.1) 80TB - 4 nodes?

[Pravas]

Hi @Snowball1014 ,

As per KB81933, its best to allocate 100GB or more.

https://kcm.trellix.com/corporate/index?page=content&id=KB81933

You may use any Server OS mentioned in KB94811

Dell Powerscale (OneFS v9.1) should work with ENSSP 2.4. However, you must reach out DELL support to confirm on that.

Thanks