Planning deployment—estimating data storage for file analysis throughput
- FAI-3500F (gen 1 & 2) uses 2 X 3.8TB SSD in RAID1 and comes with the option to purchase additional SSD HDDs.
- FNR-3500F (gen3 with fiber card) uses 4 x 3.8TB SSD in RAID10 and comes with the option to purchase additional SSD HDDs.
- FNR-VM comes with 4 different size disk images.
The following table provide guidance for FortiNDR disk storage used for malware scanning only.
| Model | Default data storage (GB) |
Max. Process rate* (files/hour) |
Storage retention (approx. days / months / year) |
|---|---|---|---|
| FNDR-3500F | 3517 | 100,000 | 270 days / 9 months /.75 years |
| FNDR-VM | 1024 | 40,000 to 80,000 | 265 days / 8.5 months /.75 years |
| FNDR-VM | 2048 | 40,000 to 80,000 | 625 days / 20.5 months /1.7 years |
| FNDR-VM | 4096 | 40,000 to 80,000 | 1345 days / 44.5 months /3.7 years |
| FNDR-VM | 8192 | 40,000 to 80,000 | 2700 days / 90 months /7.4 years |
|
VM16 and VM32 published file processing rate at 40,000 and 80,000 files per hour respectively |
* The max. process rate depends on the average size and composition of file types. NDR disk storage depends on a few factors such as:
- Size of data disk allocated in VM
- Number of disks inserted into hardware model
- Throughput of network e.g. with sniffer
-
Whether unit is used for NDR and/or pure file analysis only
Please refer to disk management section under system for more information.