Before you can deploy Security Analytics you need to:
- Consider the requirements of your enterprise and understand the deployment process.
- Have a high-level picture of the complexity and scope of a Security Analytics deployment.
The components and topology of a Security Analytics network can vary greatly between installations, and should be carefully planned before the process begins. Initial planning includes:
- Consideration of Deployment: Site Requirements and Safety.
- Review of the Deployment: Network Architecture and Ports.
- Consideration of specialized deployment considerations such as multiple Security Analytics Server hosts, support of Group Aggregationgroup aggregation on Archivers and Concentrators, and virtual hosts.
When ready to begin deployment, the general sequence is:
- Install appliances and connect to the network as described in the Hardware Setup Guides.
- Set up licensing for Security Analytics as described in the Security Analytics Licensing Guide.
- Configure individual appliances and services as described in RSA Security Analytics Host and Services Configuration Guide. These guides also describe the procedures for applying updates and preparing for version upgrades.
Note: When updating appliance hosts and services, follow recommended guidelines under the "Update Hosts in Correct Sequence" topic in the RSA Security Analytics Host and Services Configuration Guide.
Security Analytics Deployment Diagram
The following diagram illustrates a basic, multi-site Security Analytics Deployment.