System requirements
Ensure that your servers meet the minimum hardware and software requirements for IBM Security QRadar® Suite Software.
Important: These requirements are for one instance of QRadar Suite Software running on Red Hat® OpenShift® Container Platform.
- Linux® 64-bit (x86_64) systemsTip: QRadar Suite Software includes support for huge pages. The huge pages feature makes it possible for the operating system to support memory pages greater than the default, which is usually 4 KB.
- Red Hat OpenShift Container Platform 4.12.x , or 4.14.x installed by a user with cluster administrator permissions. For more information, see Setting up Red Hat OpenShift Container Platform clusters.
- Hardware requirements
- Storage requirements
- Security requirements
- Domain name and TLS certificates
- The user who installs QRadar Suite Software must have cluster administrator permissions.
- Multi-zone and single-zone deployments, where appropriate storage providers are available to support that deployment model.
- (Air-gapped installations only) Docker registry that supports Docker Manifest V2, Schema 2 .
Network requirements
Red Hat OpenShift Container Platform must have access to the URLs listed in Configuring your firewall for OpenShift Container Platform.
QRadar Suite Software requires access to the following URLs.
cp.icr.io
icr.io
registry.redhat.io
registry.access.redhat.com
.quay.io
.docker.io
access.redhat.com
api.openshift.com
.xforce.ibmcloud.com
cdn.walkme.com
www.ibm.com
vms-api.x-force-red.com
.abuseipdb.com
.alienvault.com
.apivoid.com
isc.sans.edu
.intezer.com
.intelligence.mandiant.com
.intelligence.fireeye.com
ibm.tqdemo.com
.threatgrid.com
.virustotal.com
.maxmind.com
geolite.info
.reversinglabs.com
.recordedfuture.com
icr.io
registry.redhat.io
registry.access.redhat.com
.quay.io
.docker.io
access.redhat.com
api.openshift.com
.xforce.ibmcloud.com
cdn.walkme.com
www.ibm.com
vms-api.x-force-red.com
.abuseipdb.com
.alienvault.com
.apivoid.com
isc.sans.edu
.intezer.com
.intelligence.mandiant.com
.intelligence.fireeye.com
ibm.tqdemo.com
.threatgrid.com
.virustotal.com
.maxmind.com
geolite.info
.reversinglabs.com
.recordedfuture.com
If you configure an SMTP server for IBM® Security SOAR email notifications, QRadar Suite Software also requires access the SMTP server and port.
You can install QRadar Suite Software on a cluster that uses a cluster-wide HTTPS proxy. For more information about setting up a cluster-wide proxy, see Configuring a cluster-wide HTTPS proxy.
Supported cloud providers
IBM Security QRadar Suite Software deployment is verified on the
following IBM Cloud® managed Red Hat OpenShift Container Platform clusters:
- Amazon Web Services
- Google Cloud Platform
- IBM Cloud
- Microsoft Azure
- VMware
-
Important: If you are using VMWare clusters that are hosted on multiple ESXi hosts, your storage must be shared between those hosts.
Installation options
IBM Security QRadar Suite Software has the following installation options.
- CASE installation options
- Red Hat OpenShift installation options
- Marketplace installation options