Edge Services Virtual Machine Requirements
This article reviews the minimal hardware and networking requirements to set up newly created Edge Services.
Important
Once you have downloaded either a generic Edge Service or a fully pre-configured Edge Service, you can proceed with its installation steps, following these minimal hardware and networking requirements.
Note
The new VM does not need to have an OS installed by you through an ISO; the disk image already has an OS installed on it.
Minimal Hardware Recommendations for Your Virtual Machine ⫘
- OS (if requested by your virtualization platform): Linux/64b (Ubuntu)
- 50GB Hard Disk space
- SCSI controller LSI logic
- Memory & CPU can be set depending on the number of expected concurrent scans:
- Lightweight: 768 Mb, 1-2 VCPUs (occasional scans)
- Small: 2 Gb, 2 VCPUs (100 scans/day)
- Medium: 4 Gb, 4 VCPU (200-500 scans/day)
- Large: 8 Gb, 8 VCPU (500+ scans/day)
Networking Requirements for Your Edge Service Connectivity: ⫘
- IPv4 Address
- DNS access/forwarding (UDP/TCP 53)
- NTP Synchronization (UDP 123)
- ntp.ubuntu.com
- Regular Internet Access (TCP 80/443). The following domains will be used by the Edge Service and should be safelisted:
- http://us.archive.ubuntu.com/ubuntu/
- http://security.ubuntu.com/ubuntu
- https://download.docker.com/linux/ubuntu
- https://gcr.io
- UDP outbound on the specified port visible in Secureworks® Taegis™ VDR’s Interface towards 216.9.204.0/22 — This port is used to establish an OpenVPN connection with Secureworks. This is often classified as a threat by a number of in-path security devices, so you need to define an additional exception.
Edge Services Port
Important
VMWare ESXi Specific Instructions
If you have requested an ESXi image, follow the additional steps as described in the ESXi guide and ensure you complete each of the following three mandatory sections:
Once your Edge Service is started, a VM console with our logo at the top displays.
Follow the rest of the instructions according to your choice of running a generic Edge Service or a fully pre-configured Edge Service.