cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Level 8
Report Inappropriate Content
Message 1 of 4

HA\Cluster options for vATD + Number of max VM's

we have a virtual ATD appliance, what are the options for High Availability / Clustering / any other redundancy solution. Sandboxing in addition, is there a limit for maximum number of VM's we can upload for sandboxing?
3 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: HA\Cluster options for vATD + Number of max VM's

I should check into this forum more often, my apologies.

 

The HA/LB options for vATD are the same as for physical appliances, the code is the same. What is different of course is the formfactor. As the vATD OVA is limited in size/resources, only a max. of 8 VMs as sandboxes is supported. That limit is also relevant for the cluster setup. As a cluster conducts a VM sync among the nodes, you cannot have differences between them. Every VM you create on the master gets synced across.

Example :

If I create a cluster with 4 nodes and I have 2 x Win7x64 + 6 x Win7x86 on my master, I end up with 8 x Win7x64 and 24 x Win7x86.

In most production setups (which which clusters are usually used), you're not likely to have that many variations of VMs. The golden rule is maximum attack surface and coverage for x86/x64 code, usually with a 3:1 ratio.

For a forensic setup with manual and/or API based submissions (e.g. from a SOAR tool), you'll usually aim for as many variations as possible (different version of Java, Office, browsers etc), but there you tend to have less need for HA or LB. So nothing stops you to setup 8 different VMs on Node1 and 8 different ones again on Node2. With the VM copy feature we have now, it'll be easy to move them around as well.

td;dr

Your cluster size times number of VMs on master node = total number of sandboxes but limited to a max of 8 on the master node.

Highlighted
Level 8
Report Inappropriate Content
Message 3 of 4

Re: HA\Cluster options for vATD + Number of max VM's

Thanks for the detailed answer!

about the clustering\HA - How can we set this up? couldn't find a guide for that.

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: HA\Cluster options for vATD + Number of max VM's

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community