Network interface management

In addition to the default management interface, you can add extra network interfaces to your IBM QRadar appliances to provide alternative network connectivity.

Use extra network interfaces for the following purposes:
  • Provide a dedicated crossover connection between high-availability (HA) peers. You configure a crossover connection during HA setup.
  • Provide a dedicated data collection interface for inbound events or external flow sources. TCP-based data sources must be in the same subnet as the data collection interface.
  • Increase bandwidth and add fault tolerance by bonding interfaces.

Use a regular network interface card for:

  • Data collection (logs/flows(NetFlow/s Flow))
  • Web UI
  • Backup/restore (not limited to iSCSI but can be NFS)
Note: WinCollect configurations that are connected to a non-managed port are not supported.