Proposed Architecture

Nissan Digital India - TRV xx48 AppHost

xx48 AppHost

QRadar Console XX48 n HA 125 TB Resilient IR Base Platform

SAN
Storage QRadar All In One Non-Prod
Resilient Action Processor

QRadar Risk Manager

NNA (30K EPS) NE (30K EPS) NML (30K EPS)

QRadar Console XX48 Cold Standby
EP in Cloud for EP in Cloud for
EP in Cloud for
future use XX29 Event future use
future use
XX29 Event Processor in HA
Processor in HA
XX29 Event
125 TB SAN Storage 125 TB SAN Storage Processor in HA
Resilient IR
125 TB SAN Storage Resilient IR
Cold Standby
Resilient Action Processor
System Requirement

Location Component Primary HA Total CPU Memory Storage / Hard Disks Network Power
Supply

Intel i350 QP 1 Gb
Intel X710 2P 10 GbE
Emulex 8 Gb FC 2P HBA
2 x Xeon Gold 6132 14C 2.6 2 x 10 Gb Short Range SFP+ management Dual
256 GB 6 x 3.84 TB 12 Gb SAS 2.5"
QRadar Console 1 1 2 GHz 19 MB Cache 3.70 GHz ports, Avago AFBR-709SMZ-IB8 or Finisar redundant
RAM SSD, 15.36 TB Total (RAID6)
140 W FTLX8571D3BCL-BN or BNT BN-CKM-SP- 1100 W AC
SR
2 x 16 Gb Fiber Channel SFP+ Installed in
Emulex Card

Nissan
Digital Intel i350 QP 1 Gb
India - Intel X710 2P 10 GbE
Emulex 8 Gb FC 2P HBA
TRV 2 x Xeon Gold 6132 14C 2.6 2 x 10 Gb Short Range SFP+ management Dual
256 GB 6 x 3.84 TB 12 Gb SAS 2.5"
App Host 1 1 2 GHz 19 MB Cache 3.70 GHz ports, Avago AFBR-709SMZ-IB8 or Finisar redundant
RAM SSD, 15.36 TB Total (RAID6)
140 W FTLX8571D3BCL-BN or BNT BN-CKM-SP- 1100 W AC
SR
2 x 16 Gb Fiber Channel SFP+ Installed in
Emulex Card

Resilient Base
1 0 1 8 vCPU 32 GB 1 TB Usable
Platform
Resilient Action
1 0 1 4 vCPU 16 GB 1 TB Usable
processor
QRadar Risk
1 0 1 8 vCPU 64 GB 1 TB Usable
Manager
System Requirement Contd….

Storage / Hard
Location Component Primary HA Total CPU Memory Network Power Supply
Disks

2 x 16 Gbps Fiber Channel HBA ports

4 x 10/100/1000 Base-T Ethernet management interfaces
1 x 10/100/1000 Base-T integrated management module
12 x 8 TB 7.2K 12
2 x Xeon Gold 5118 interface
256 GB Gbps 512e 3.5” Dual redundant 1100
NNA Event Processor 1 1 2 12C 2.3 GHz 16 MB
RAM SSD, 80 TB total
2 x 10 Gbps SFP+ Ethernet management interfaces
W AC
Cache 3.20 GHz 105 W 2 x 10 Gb Short Range SFP+ management ports, Avago AFBR-
(RAID6)
709SMZ-IB8 or Finisar FTLX8571D3BCL-BN or BNT BN-CKM-SP-SR
2 x 16 Gb Fiber Channel SFP+ Installed in Emulex Card

2 x 16 Gbps Fiber Channel HBA ports

4 x 10/100/1000 Base-T Ethernet management interfaces
1 x 10/100/1000 Base-T integrated management module
12 x 8 TB 7.2K 12
2 x Xeon Gold 5118 interface
256 GB Gbps 512e 3.5” Dual redundant 1100
NE Event Processor 1 1 2 12C 2.3 GHz 16 MB
RAM SSD, 80 TB total
2 x 10 Gbps SFP+ Ethernet management interfaces
W AC
Cache 3.20 GHz 105 W 2 x 10 Gb Short Range SFP+ management ports, Avago AFBR-
(RAID6)
709SMZ-IB8 or Finisar FTLX8571D3BCL-BN or BNT BN-CKM-SP-SR
2 x 16 Gb Fiber Channel SFP+ Installed in Emulex Card
System Requirement Contd….
Storage / Hard
Location Component Primary HA Total CPU Memory Network Power Supply
Disks

2 x 16 Gbps Fiber Channel HBA ports

4 x 10/100/1000 Base-T Ethernet
management interfaces
1 x 10/100/1000 Base-T integrated
management module interface
12 x 8 TB 7.2K
2 x Xeon Gold 5118 12C 2.3 2 x 10 Gbps SFP+ Ethernet management
12 Gbps 512e Dual redundant 1100 W
Event Processor 1 1 2 GHz 16 MB Cache 3.20 GHz 256 GB RAM interfaces
3.5” SSD, 80 TB AC
105 W 2 x 10 Gb Short Range SFP+ management
total (RAID6)
ports, Avago AFBR-709SMZ-IB8 or Finisar
FTLX8571D3BCL-BN or BNT BN-CKM-SP-SR
2 x 16 Gb Fiber Channel SFP+ Installed in
Emulex Card

NML
Intel i350 QP 1 Gb
Intel X710 2P 10 GbE
6 x 3.84 TB 12 Emulex 8 Gb FC 2P HBA
2 x Xeon Gold 6132 14C 2.6
QRadar Console - Gb SAS 2.5" 2 x 10 Gb Short Range SFP+ management Dual redundant 1100 W
1 0 1 GHz 19 MB Cache 3.70 GHz 256 GB RAM
Standby SSD, 15.36 TB ports, Avago AFBR-709SMZ-IB8 or Finisar AC
140 W
Total (RAID6) FTLX8571D3BCL-BN or BNT BN-CKM-SP-SR
2 x 16 Gb Fiber Channel SFP+ Installed in
Emulex Card

Resilient - Base
Platform - Cold 1 0 1 8 vCPU 32 GB 1 TB Usable
Standby
Resilient – Action
Processor - Cold 1 0 1 4 vCPU 16 Gb 1 TB Usable
Standby
Notes & Assumptions

 30000 EPS per region has been considered as per the discussion with the customer. Total 90000 EPS across all regions

 Event Processor in HA at each region

 6 Months Online Storage and 12 Months of Offline storage

 1 Event Processor in each region for Cloud is factored

 2 Additional servers for VM at Nissan Digital India – TRV – (For Resilient Base Platform, Action processor and QRadar Risk Manager

 1 Additional server for VM at NML. (For Cold standby Resilient Base Platform and Action Processor)

 QVM for 3500 Assets

 App Host is factored at the Primary location

 Cold standby Console for IBM QRadar at NML.

 10 Authorized users and 5K actions per month are factored for Resilient