Deploying TIE, DXL Broker and MAR question

[User27605043]

I need to deploy these products in my environment. The OVA says this. This ISO contains the TIE Server, MAR Server and the DXL Broker.

The question is should I deploy all three to a single server (with a second for fault tolerance of course), or should I break it up in to multiple servers for each of these products?

My environment is on the smaller edge (less than 10,000 endpoints). What are the pros and cons of deployment with more or less servers?

[YashT]

Hello @User27605043 ,

This should help for Deploy Active Response, DXL, and TIE server automatically

First-time installation workflow

[User27605043]

As you suggested I reviewed the documentation and noted that the TIE Guide does say a single server can be used to host all 3 services. I was curious about best practice though and if anyone has any reason it would be better to separate out the functions to more servers.  Thanks,

[LKS · Accepted solution]

Hi User27605043,

You can't separate TIE/MAR on two different server as they both shares the same database which is postgresql.  The below link may help to get TIE sizing and performance information.

https://community.mcafee.com/t5/Documents/TIE-Sizing-and-Performance-Guide/ta-p/553147

https://kc.mcafee.com/corporate/index?page=content&id=KB86314

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

[uday-]

Hello Stewart,

The guide suggests that you can install all three services on the same server. But if you think with a fault tolerance perspective. I would suggest you install on two different servers as mentioned below which would help to meet your requirements.

Server 1 - Install/Enable DXL broker and TIE servicer (This will be considered as Primary server)

Server 2 - Install/Enable DXL broker, TIE server (Secondary server which keeps replicating the reputation information from the primary regularly) and MAR server (Which is dependent on TIE database Postgres SQL)

Note: Ensure to configure the DXL broker by enabling the option to provide data to MAR cloud from the DXL topology

On EPO server Configure your DXL client policy in such a way that it should connect to any available DXL broker on the fabric to establish a connection with the TIE server which will help in case of any one of the two servers goes offline and other online will service client's request.

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and, together we can help other members?