Hardware and software requirements

This section describes system requirements of Kaspersky CyberTrace.

Supported operating systems

Kaspersky CyberTrace can run on the following operating systems:

Dependencies for Linux

In Linux, Kaspersky CyberTrace has the following dependencies:

Software requirements for integrations with SIEM solutions

When integrating with SIEM solutions, Kaspersky CyberTrace has the following software requirements.

Software requirements for integrations with SIEM solutions

SIEM solution

Software requirements

Splunk

Splunk® 6.5 to 7.2

ArcSight ESM

ArcSight ESM 6.8 to 7.0

ArcSight SmartConnector

QRadar

IBM® QRadar® v7.2.5 or later

RSA NetWitness

RSA NetWitness® 10.5, 10.6, or 11.2

LogRhythm

LogRhythm 7.1.7 or later

Integrations with other SIEM solutions are available. For more information, see https://support.kaspersky.com/datafeeds.

Supported browsers

Kaspersky CyberTrace Web can be used using the following web browsers:

CPU requirements

Kaspersky CyberTrace has the following CPU requirements:

It is recommended to use Kaspersky CyberTrace on high-end servers.

RAM and hard disk space requirements

System requirements depend on the use case and feeds that you use. For more detail about the system requirements, contact your technical account manager (TAM).

The actual amount of hard disk space for each feed depends on the size of the original feed file. This size changes when feeds are updated. Over time, the size of the feed files may change significantly, which can change the required amount of hard disk and memory space.

RAM and hard disk space requirements listed in the two tables below apply only to Kaspersky Threat Data Feeds. Using third-party feeds requires additional disk and memory resources.

The table below lists RAM and hard-disk space requirements for using only demo feeds and for using all commercial feeds on Linux-based systems.

Hardware requirements for using different feeds on Linux

Feeds used

HDD, MB

RAM, MB - with StorageType set to Mem

RAM, MB - with StorageType set to Disk

All demo feeds

100

100

100

All commercial feeds

3400

5500

3000

The table below lists RAM and hard disk space requirements for using only demo feeds and for using all commercial feeds on Windows-based systems.

Hardware requirements for using different feeds on Windows

Feeds used

HDD, MB

RAM, MB - with StorageType set to Mem

RAM, MB - with StorageType set to Disk

All demo feeds

100

100

100

All commercial feeds

3200

6000

3300

Network requirements

The computer on which Feed Utility runs must have access to the website https://wlinfo.kaspersky.com/.

The computer on which Kaspersky CyberTrace runs must have access to the computer with the SIEM solution.

Computers of users that want to gain access to Kaspersky CyberTrace Web UI must have access to the address and port of CyberTrace Web UI.

Page top