Planning deployment
This page contains information about estimating data storage for file analysis throughput.
Storage by model
- FAI-3500F (gen 1 & 2) uses 2 X 3.8TB SSD in RAID1 by default and comes with the option to purchase additional SSD HDDs. This model will support RAID 10 if 2 x (or more) additional SSD are purchased.
- FNR-3500F (gen3 with fiber card) uses 4 x 3.8TB SSD in RAID10 and comes with the option to purchase additional SSD HDDs.
- FNR-VM comes with 4 different size disk images.
The following table provide guidance for FortiNDR disk storage used for malware scanning only.
| Model | Total disk size (RAID 10) | Storage retention |
|---|---|---|
| FNDR-3500F 4 SSD |
6.6 TB |
66 days |
| FNDR-3500F 2 SSD |
3.3 TB |
33 days |
|
FNDR-3500 8 SSD |
13.2 TB |
132 days |
| FNDR-3500 16 SSD | 26.4 TB | 264 days |
| FNDR-VM | 1024 GB | 20 days |
| FNDR-VM | 2048 GB | 40 days |
| FNDR-VM | 4096 GB | 81 days |
| FNDR-VM | 8192 GB | 163 days |
|
VM16 and VM32 published file processing rate at 40,000 and 80,000 files per hour respectively |
* The max. process rate depends on the average size and composition of file types. NDR disk storage depends on a few factors such as:
- Size of data disk allocated in VM
- Number of disks inserted into hardware model
- Throughput of network e.g. with sniffer
-
Whether unit is used for NDR and/or pure file analysis only
Please refer to disk management section under system for more information.