I have an ATD-3000 3.8.2 infrastructure with 3 geographic clusters, each cluster consists of 4 primary, backup, and secondary appliances.
Traffic analysis is provided by IPS sensors and a NPS.
The ATD infrastructure is integrated with TIE-DXL, while I hooked up to share GTI reputation, MWG, MEG information.
I have a doubt about the optimal values for monitoring each appliance,
Threshold for cpu and memory.
Do you have a suggestion?