Bandwidth Usage of Traps

[MHamad]

Hello,

I am looking for some information on the amount of bandwidth used by the Traps agent when communicating with the ESM server.

Also, any averages on the log volume generated by each agent?

Any help is appreciated.

Thanks,

[Willian · Accepted solution]

Hi @MHamad

The following table presents the minimal Traps network bandwidth requirement (per 16k agents)Multi ESM Considerations

If Multi ESM is not used – make sure to disable ‘Multi ESM’ feature from the ESM

It is recommended to use more than one ESM Server in one of the following scenarios:

- Agents are located in different geographic locations

- More than 16,000 agents are planned to be deployed

- High availability/Disaster Recovery scenarios

To have Multi ESM environment functioning effectively it is required to have latency lower than 100ms between ESM Servers & the MS SQL database.

When multiple ESM Servers are required it is recommended to have a forensic folder on every ESM server, this will require an installation of IIS and BITS in the ESM Server (even if it doesn’t have ESM Console installed on the same server).3

I hope this helps.

Willian

[JosueQuinto]

En el caso de TMS, ¿cual seria el consumo de ancho de banda de los puntos finales?

[efrancis]

For every 100,000 agents, you will need to allocate 120Mbps of bandwidth. The bandwidth requirement scales linearly. For example, to support 300,000 agents, plan to allocate 360Mbps of bandwidth (three times the amount required for 100,000 agents).

https://docs.paloaltonetworks.com/traps/tms/traps-management-service-admin/get-started-with-tms/plan...

[joseph.liwanag]

Hi,

Good day.  I would like to check if Palo Alto Traps Endpoint security can work over satellite network with latency varying from 700 - 2000ms and speed from 512kbps to 1Mbps?

Thanks,

Joseph