Document version: 5W100-20210723

Software version: E1704

Contents

Q.     Can SMP manage third-party firewall and IPS devices?· 1

A.     No. Currently, security service management software from all vendors in the industry can manage only their own security devices. To incorporate security devices, the software must dock with the device underlayer and the device APIs. The device underlayer and APIs are proprietary to vendors and are not open for public use. 1

Q.     What are the minimum hardware and software requirements for SMP installation?· 1

A.     You can install SMP on a VM or on a physical server. The VM or physical server is the host of SMP. 1

Q.     How does SMP identify licensed nodes?· 2

A.     SMP identifies licensed nodes by IP address. 2

Q.     What logs can SMP collect?· 2

A.     SMP collects only security event logs from its managed IPS and firewall devices, and it does not collect system logs and session logs from the devices. The platform is designed to perform unified policy management and signature library upgrade for security devices. As a best practice, use dedicated log audit devices to collect logs. 2

H3C SecCenter SMP FAQ

The document contains the most frequently asked questions about the H3C SecCenter Security Management Platform (referred to as SMP or the platform in this document).

Q.     Can SMP manage third-party firewall and IPS devices?

A.     No. Currently, security service management software from all vendors in the industry can manage only their own security devices. To incorporate security devices, the software must dock with the device underlayer and the device APIs. The device underlayer and APIs are proprietary to vendors and are not open for public use.

Q.     What are the minimum hardware and software requirements for SMP installation?

A.     You can install SMP on a VM or on a physical server. The VM or physical server is the host of SMP.

For a single SMP to manage 1 to 10 devices, the host must meet the following minimum hardware and software requirements:

·     CPU—2*4110 (2.1 GHz/8 cores/20 MB).

·     Memory size—32 GB or above.

·     Drive—As a best practice, use 1 TB drive. You can increase the storage space according to the size of logs.

·     OS version—H3liunx or SUSE12SP2. By default, SMP provides the H3liunx operating system.

·     Web browser—Chrome 57 or later.

For a single SMP to manage 10 to 50 devices, the host must meet the following minimum hardware and software requirements:

·     CPU—2*4110 (2.1 GHz/8 cores/20 MB).

·     Memory size—64 GB or above.

·     Drive—As a best practice, use 2 TB drive. You can increase the storage space according to the size of logs.

·     OS version—H3liunx or SUSE12SP2. By default, SMP provides the H3liunx operating system.

·     Web browser—Chrome 57 or later.

For a single SMP to manage 50 to 100 devices, the host must meet the following minimum hardware and software requirements:

·     CPU—2*4110 (2.1 GHz/8 cores/20 MB).

·     Memory size—128 GB or above.

·     Drive—As a best practice, use 4 TB drive. You can increase the storage space according to the size of logs.

·     OS version—H3liunx or SUSE12SP2. By default, SMP provides the H3liunx operating system.

·     Web browser—Chrome 57 or later.

Q.     How does SMP identify licensed nodes?

A.     SMP identifies licensed nodes by IP address.

For example, a firewall device is licensed at an IP address. The IPS module is enabled on the firewall device and SMP manages both the firewall and IPS modules on the device through the same IP address. In this case, SMP identifies the device as one licensed node.

If one firewall device and one IPS device are licensed at different IP addresses, SMP identifies the devices as two licensed nodes.

Q.     What logs can SMP collect?

A.     SMP collects only security event logs from its managed IPS and firewall devices, and it does not collect system logs and session logs from the devices. The platform is designed to perform unified policy management and signature library upgrade for security devices. As a best practice, use dedicated log audit devices to collect logs.