System and License Requirements
To install and run Tenable Core + Tenable OT Security or Tenable OT Security Sensor, your application and system must meet the following requirements.
Tip: Tenable OT Security offers pre-imaged appliances that simplify deployment and reduce setup time. Alternatively, you can source your own hardware and apply Tenable ISO image to it. If you supply your own or choose to use Tenable's hardware, refer to the Tenable OT Security Hardware Specifications for guidance. All components of OT Security, the ICP, Enterprise Manager (EM), and Sensor can run on any hardware that meets the specifications.
Note: Tenable does not recommend deploying multiple applications on a single instance of Tenable Core. If you want to deploy several applications on Tenable Core, deploy a unique instance for each application.
OT Security Hardware Requirements
For more information about hardware requirements specifically for OT Security or Tenable OT Security Sensor, see Tenable OT Security Hardware Specifications in the General Requirements Guide.
Tenable recommends installing OT Security on direct-attached storage (DAS) devices, preferably solid-state drives (SSD), for best performance. Tenable strongly encourages the use of solid-state storage (SSS) that have a high drive-writes-per-day (DWPD) rating to ensure longevity.
Tenable does not support installing OT Security on network-attached storage (NAS) devices. Storage area networks (SAN) with a storage latency of 10 milliseconds or less, or Tenable hardware appliances, are a good alternative in such cases.
Enterprise networks can vary in performance, capacity, protocols, and overall activity. Resource requirements to consider for deployments include raw network speed, the size of the network to monitor, and the configuration of the application. Processors, memory, and network card selection are heavily based on these deployment configurations. Disk space requirements vary depending on usage based on the amount of data, and length of time, you store data on the system.
Note: OT Security needs to be able to perform full packet captures of monitored traffic1, and the size of the policy event data stored by OT Security depends on the number of devices and the type of environment.
ICP System Requirement Guidelines (Virtual or Tenable Core)
| Maximum SPAN/TAP Throughput (Mbps) | CPU Cores2 | Memory (DDR4) | Storage Requirements | Network Interfaces |
|---|---|---|---|---|
| 50 Mbps or less | 4 | 16 GB RAM | 128 GB | Minimum 4 x 1 Gbps |
| 50-150 Mbps | 16 | 32 GB RAM | 512 GB | Minimum 4 x 1 Gbps |
| 150-300 Mbps | 32 | 64 GB RAM | 1 TB | Minimum 4 x 1 Gbps |
| 300 Mbps to 1 GB | 32-64 | 128 GB RAM or more | 2 TB or more | Minimum 4 x 1 Gbps |
OT Security uses the following mounted partitions:
| Partition | Content |
|---|---|
| / | operating system |
| /opt | application and database files |
| /var/pcap | packet captures (full packet capture, event, query) |
The standard install process places these partitions on the same disk. Tenable recommends moving these to partitions on separate disks to increase throughput. OT Security is a disk-intensive application and using disks with high read/write speeds, such as SSDs, results in the best performance. Tenable recommends using an SSD with high DWPD ratings on customer-supplied hardware installations when using the packet capture feature in OT Security.
Tip: Tenable does not require RAID disks for even our largest customers. However, in one instance, response times for queries with a faster RAID disk for a customer with more than one million managed vulnerabilities moved from a few seconds to less than a second.
Network Interface Requirements
You must have two (or more) network interfaces present on your device before installing OT Security. Tenable recommends the use of gigabit interfaces. The VMware OVA creates these interfaces automatically. Create these interfaces manually when you are installing the ISO (such as Hyper-V).
Note: Tenable does not provide SR-IOV support for the use of 10 G network cards and does not guarantee 10 G speeds with the use of 10 G network cards.