Hardware platform - HP EliteDesk 800 Mini PC

[techb...@gmail.com]

The unending question....what hardware to use?

I'm interested in standardizing on a hardware platform for a combined Security Onion server/sensor for small businesses we are servicing that mostly have a single public IP and an internet link of less than 50 Mbps. We're an HP shop and the EliteDesk Mini PCs look interesting.

Does anyone have any experience with this hardware platform and Security Onion?

These units come with i3, i5, or i7 processors -- any particular processor that would be recommended?

I'll probably shoot for 16 GB RAM.

Just interested in thoughts on the above and especially interested in hearing if anyone is currently using this platform.

Thanks.

[Doug Burks]

Hi techburgher,

How many network interfaces do those boxes have? Please keep in mind
that you'll want at least 2 NICs:
https://github.com/Security-Onion-Solutions/security-onion/wiki/Hardware#nic

For small form factor sensors like this, I've had good experiences
with the FitPC 4 Pro:
http://www.fit-pc.com/web/products/specifications/fit-pc4-models-specifications/?model%5B%5D=fit-PC4-CG420-WACB-FM4U&model%5B%5D=fit-PC4-CA125-WB-FM4U

> --
> You received this message because you are subscribed to the Google Groups "security-onion" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
> To post to this group, send email to securit...@googlegroups.com.
> Visit this group at http://groups.google.com/group/security-onion.
> For more options, visit https://groups.google.com/d/optout.



--
Doug Burks
Need Security Onion Training or Commercial Support?
http://securityonionsolutions.com

[techb...@gmail.com]

On Monday, November 30, 2015 at 11:49:32 AM UTC-5, Doug Burks wrote:

> How many network interfaces do those boxes have? Please keep in mind
that you'll want at least 2 NICs:

Yeah, I knew that was going to be an issue. However, I thought of using a USB NIC for management purposes and the on-board NIC as the monitor interface.

I'd really love to use am embedded all-in-one, but being an HP shop, I doubt I'd be able to convince others to go that route.

Thanks!

[Noah]

Hi Doug,

I'm going to be putting together a home lab soon for a standalone setup. My network is less than 50 Mbps and I have one WAN IP address.

I came across this post of yours about the FitPC 4 Pro. Given the newest hardware requirements of the Elastic Stack (minimum of 4 cores and 8GB of RAM) is the FitPC 4 Pro still a good choice?

I'm also looking at an HP EliteBook that has a 3rd generation i5 that only has 2 cores, but with hyper-threading it has 4 cores. Is this a better choice?

Also, I want to use external USB drives for the data collection, but I'm not sure if USB 2.0 is fast enough or if I must get USB 3.0?

Thank you for your help!

Noah

[Wes Lambert]

Noah,

If you're not monitoring much traffic USB 2.0 should be okay.  Is there any reason you are going with USB drives for data storage?  I don't know about the number and types of devices on your network, but I imagine you would not be averaging 50Mbps all day, every day.  The FitPC4 should still be okay.  I believe you can get up to 16GB of RAM for them, although more RAM is always better if you can afford it.

Thanks,

Wes  

On Sat, May 5, 2018 at 1:45 PM, Noah <nmi...@gmail.com> wrote:

On Monday, November 30, 2015 at 10:49:32 AM UTC-6, Doug Burks wrote:
> Hi techburgher,
>
> How many network interfaces do those boxes have?  Please keep in mind
> that you'll want at least 2 NICs:
> https://github.com/Security-Onion-Solutions/security-onion/wiki/Hardware#nic
>
> For small form factor sensors like this, I've had good experiences
> with the FitPC 4 Pro:
> http://www.fit-pc.com/web/products/specifications/fit-pc4-models-specifications/?model%5B%5D=fit-PC4-CG420-WACB-FM4U&model%5B%5D=fit-PC4-CA125-WB-FM4U
>
> On Mon, Nov 30, 2015 at 10:54 AM,  <techb...@gmail.com> wrote:
> > The unending question....what hardware to use?
> >
> > I'm interested in standardizing on a hardware platform for a combined Security Onion server/sensor for small businesses we are servicing that mostly have a single public IP and an internet link of less than 50 Mbps. We're an HP shop and the EliteDesk Mini PCs look interesting.
> >
> > Does anyone have any experience with this hardware platform and Security Onion?
> >
> > These units come with i3, i5, or i7 processors -- any particular processor that would be recommended?
> >
> > I'll probably shoot for 16 GB RAM.
> >
> > Just interested in thoughts on the above and especially interested in hearing if anyone is currently using this platform.
> >
> > Thanks.
> >
> > --
> > You received this message because you are subscribed to the Google Groups "security-onion" group.

> > To unsubscribe from this group and stop receiving emails from it, send an email to security-onion+unsubscribe@googlegroups.com.
> > To post to this group, send email to security-onion@googlegroups.com.

> > Visit this group at http://groups.google.com/group/security-onion.
> > For more options, visit https://groups.google.com/d/optout.
>
>
>
> --
> Doug Burks
> Need Security Onion Training or Commercial Support?
> http://securityonionsolutions.com

Hi Doug,

I'm going to be putting together a home lab soon for a standalone setup. My network is less than 50 Mbps and I have one WAN IP address.

I came across this post of yours about the FitPC 4 Pro. Given the newest hardware requirements of the Elastic Stack (minimum of 4 cores and 8GB of RAM) is the FitPC 4 Pro still a good choice?

I'm also looking at an HP EliteBook that has a 3rd generation i5 that only has 2 cores, but with hyper-threading it has 4 cores. Is this a better choice?

Also, I want to use external USB drives for the data collection, but I'm not sure if USB 2.0 is fast enough or if I must get USB 3.0?

Thank you for your help!

Noah

--
Follow Security Onion on Twitter!
https://twitter.com/securityonion
---

You received this message because you are subscribed to the Google Groups "security-onion" group.

To unsubscribe from this group and stop receiving emails from it, send an email to security-onion+unsubscribe@googlegroups.com.
To post to this group, send email to security-onion@googlegroups.com.
Visit this group at https://groups.google.com/group/security-onion.

For more options, visit https://groups.google.com/d/optout.

--

https://twitter.com/therealwlambert

https://securityonion.net/

[Noah]

Hi Wes,

Thank you for your reply. I'm not sure what the preferred way is for data storage. I'm trying to go the least expensive route so I figured I'd go with USB drives, but I am open to suggestions. If I end up going with a laptop solution for SO I will get an internal drive for the extra drive bay, but what kind of storage drive can I get for a FitPC other than an external USB drive?

I have not measured my network's average bit rate so I am just guessing when I say that it is under 50Mbps. It is a typical home network with under 20 devices. I have 7 kids so most of our traffic is streaming videos from YouTube, Hulu, Amazon, etc.

I do plan on maxing out the RAM. Do you know if SO can take advantage of hyper-threading?

Thank you and God bless you!

Noah

[Wes Lambert]

Noah,

For the FitPC, I believe it can have it's own internal hard drive.

Most of the applications that SO utilizes do not actively take advantage of hyperthreading, so you will need to keep that in mind.

Thanks,

Wes

--
Follow Security Onion on Twitter!
https://twitter.com/securityonion
---
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onion+unsubscribe@googlegroups.com.
To post to this group, send email to security-onion@googlegroups.com.
Visit this group at https://groups.google.com/group/security-onion.
For more options, visit https://groups.google.com/d/optout.