Examples of requirements

This section describes the minimum hardware requirements for the three common modes of using Kaspersky CyberTrace.

Evaluation mode

This mode is characterized by the following:

• Kaspersky CyberTrace is activated under a Community Edition license.
• The number of processed events per second (EPS) is 250.
• Demo feeds are used.
• Retrospective scan is enabled.
• Events used for the retrospective scan are stored for three months.
• Results of the retrospective scan are stored for three months.

For this mode, the minimum requirements are as follows:

Hardware requirements for evaluation mode

Operating system	EPS	CPU cores	RAM, GB	Disk space, GB	Network bandwidth, Gbps
Windows or Linux	250	4	16	468: 3 (for system files, statistics, and other service data) 0.93 (for saved detections) 463.48 (for retrospective scan data) 0.37 (for indicators)	1

Multi-user mode with commercial feeds, no retroscan

This mode is characterized by the following:

• Kaspersky CyberTrace is activated under a commercial license.
• Three users are added.
• The following commercial feeds are used:
  • Malicious URL Data Feed
  • Phishing URL Data Feed
  • IP Reputation Data Feed
  • Malicious Hash Data Feed
  • APT IP Data Feed
  • APT Hash Data Feed
  • APT URL Data Feed
• Retrospective scan is disabled.
• Events used for the retrospective scan are stored for three months.

For this mode, the minimum requirements are as follows:

Hardware requirements for multi-user mode with commercial feeds, no retroscan

Operating system	EPS	CPU cores	RAM, GB	Disk space, GB	Network bandwidth, Gbps
Windows or Linux	2,000	8	16	17	1
Windows or Linux	5,000	16	16	28	1
Windows or Linux	10,000	24	16	46	1
Windows or Linux	20,000	32	24	83	1
Windows or Linux	40,000	48	48	157	10
Windows or Linux	50,000	48	48	194	10

Multi-user mode with commercial feeds and retroscan

This mode is characterized by the following:

• Kaspersky CyberTrace is activated under a commercial license.
• Three users are added.
• The following commercial feeds are used:
  • Malicious URL Data Feed
  • Phishing URL Data Feed
  • IP Reputation Data Feed
  • Malicious Hash Data Feed
  • APT IP Data Feed
  • APT Hash Data Feed
  • APT URL Data Feed
• Retrospective scan is enabled.
• Events used for the retrospective scan are stored for three months.
• Results of the retrospective scan are stored for three months.

For this mode, the minimum requirements are as follows:

Hardware requirements for multi-user mode with commercial feeds and retroscan

Operating system	EPS	CPU cores	RAM, GB	Disk space, GB	Network bandwidth, Gbps
Windows or Linux	2,000	8	16	3,724	1
Windows or Linux	5,000	16	16	9,297	1
Windows or Linux	10,000	24	16	18,585	1
Windows or Linux	20,000	32	32	37,162	1
Windows or Linux	40,000	48	48	74,315	10
Windows or Linux	50,000	48	48	92,891	10

Page top