The Secureworks suite of products are designed to be lightweight in order to have minimum impact on the infrastructure they protect. The following virtual appliance specification for XDR and VDR should be relatively easy to accommodate during sizing for an integrated VMS plus CV platform like the Dell Virtualized Computer Vision for Smart Transportation.
|VDR Virtual Appliance||4||8 GB||48 GB|
|XDR Virtual Appliance||4||8 GB||20 GB|
Note while the XDR appliance is capable of interfacing with Syslog and other system monitoring tools, more robust protection is available when Red Cloak agents are installed on individual servers and devices.
During the extensive testing described above, the observed overhead for the Red Cloak agent can exceed 10% for measurable time periods in some cases when enabled on a Windows 2019 Server.
When sizing your system, keep in mind the potential impact of this added workload if any servers are going to be running >75% CPU before installing a Red Cloak agent. Our recommendation is to add additional CPU capacity to any server with a processing workload that heavy before adding security monitoring with XDR. Adding additional CPU capacity is typically a straightforward task in a VMware virtualized environment.