WitFoo Setup
Technical Specification
WitFoo Precinct can be deployed as an all-in-one appliance for organizations with less than 10,000 events per second (EPS). It can also be deployed in a horizontally vertically scaling architecture to allow for millions of events per second and long-term retention and processing. Steps in this section are provided for appliance deployment.
Integration Requirements
To integrate WitFoo virtual appliance with Delinea Secret Server, you must meet the prerequisites and configure the Delinea Secret Server.
Appliance Nodes
WitFoo Precinct is deployed via appliance nodes. all three WitFoo Precinct components. Each node can handle up to 50,000 EPS when clustered (at optimal resource allocation and core processing level).
Appliance CPU and RAM must comply with the table below.
CurrentlyPrimary Node is supported for integration. The Primary Node contains Investigative Engine (IE), Streamer, and Data nodes. This is rated up to 10k EPS.
Primary Node
The table provides details of the primary node.
| Parameters | Details |
|---|---|
| CPU (min) | 6 |
| RAM (min) | 12 GB |
Increasing RAM reduces disk input/output and improves query time. The recommended RAM for storage is as follows:
- 50GB to 200GB disk space: 8GB RAM
- 1TB disk space: 16GB RAM
- 8TB disk space: 64GB RAM
Open Ports
The communication between WitFoo virtual appliance and Secret Server happens through ports. The all-in-one appliance has the following open ports:
- SSH (22/tcp)
- HTTPS (443/tcp)
- Syslog (514/udp/tcp, 6055/tcp, 6555/tcp)
- NetFlow (2055/udp)
- Beats (5044/tcp)
Prerequisites
To integrate Delinea Secret Server with WitFoo Precinct Virtual Appliance, you must first install Delinea Secret Server.
