Deep Security 11.3 has reached end of support. Use the version selector (above) to see more recent versions of the Help Center.

Sizing

Sizing guidelines for Deep Security deployments vary by the scale of your network, hardware, and software. See also Sizing for Azure Marketplace.

Deep Security Manager sizing

The sizing recommendations for the Deep Security Manager computer depends on the number of agents that are being managed:

Multiple server nodes

For better availability and scalability in larger deployments, use a load balancer, and install the same version of Deep Security Manager on multiple servers ("nodes"). Connect them to the same database storage.

To avoid high load on database servers, don't connect more than two Deep Security Manager nodes to each database server.

Each manager node is capable of all tasks. No node is more important than any of the others. You can log in to any node, and agents, appliances, and relays can connect with any node. If one node fails, other nodes can still provide service, and no data will be lost.

Database sizing

Several variables affect database disk space requirements:

Event retention settings can be configured in the policy, the individual computer settings, or both. (See Policies, inheritance, and overrides.)

The database sizes in the following tables are suggestions for use with the default settings for log and event retention. (See Log and event storage best practices.) To estimate sizing for your database:

For example, you could deploy 750 agents with Deep Security Anti-Malware, Intrusion Prevention System and Integrity Monitoring. The total of the individual recommendations is 320 GB (20 + 100 + 200). However, the "Full Policy" recommendation is 300 GB. Therefore, you should provision 300 GB.

Disk space estimates

Database sizing considerations

Deep Security Agent and Relay sizing

Platform	Features enabled	RAM	Minimum disk space
Windows	All protection	2 GB (4 GB recommended)	1 GB
Windows	Relay only	2 GB (4 GB recommended)	30 GB
Linux	All protection	1 GB (5 GB recommended)	1 GB
Linux	Relay only	2 GB (4 GB recommended)	30 GB

Requirements vary by OS version, so some may require less RAM. Less RAM is also required if you are not enabling all of the Deep Security features.
The Deep Security Relay must store packages for each of your agents' platforms. For more information, see Get Deep Security Agent software. If you have many different platforms, more disk space is required.
If V-Motions are expected, another 10 GB of disk space is recommended for a total of 40 GB.