System Requirements for Change Guardian 6.3

January 2024

OpenText recommends the tested platforms listed below. However, customers running on any platforms not provided in this list or with untested configurations will be supported until the point OpenText determines that the root cause is the untested platform or configuration. Issues that can be reproduced on the tested platforms will be prioritized and fixed according to standard defect-handling policies. For more information about support polices, see Support Policies.

1.0 System Requirements

1.1 Software Requirements

Certified Platforms

Component Name

Platforms

Change Guardian Server

  • Red Hat Enterprise Linux Server (RHEL) 8.7

  • Red Hat Enterprise Linux Server (RHEL) 8.6

  • Red Hat Enterprise Linux Server (RHEL) 7.9

  • SUSE Linux Enterprise Server (SLES) 15 SP4 (64-bit)

  • SUSE Linux Enterprise Server (SLES) 12 SP5 (64-bit)

Change Guardian Server Soft Appliance (Includes Operating System)

ISO Appliance

  • VMware ESX 6.7

VHD Appliance

  • Hyper-V Server 2022

  • Hyper-V Server 2019

OVF Appliance

  • VMware ESX 6.7

Change Guardian Policy Editor

  • Windows 11 (22H2)

  • Windows 10 (22H2) (64-bit)

  • Windows Server 2022

  • Windows Server 2019

  • Windows Server 2016

Change Guardian Agent for Windows

  • Windows 11 (64-bit)

  • Windows 10 (22H2) (32-bit and 64-bit)

  • Windows Server 2022

  • Windows Server 2022 Core

  • Windows Server 2019

  • Windows Server 2019 Core

  • Windows Server 2016

  • Windows Server 2016 Core

Change Guardian Agent for UNIX

  • IBM Power PC - AIX 7.3

  • IBM Power PC - AIX 7.2

  • HP-UX 11iv3 Itanium

  • Oracle Solaris 11.4 SPARC

  • Oracle Solaris 11.3 SPARC

  • Oracle Solaris 10 SPARC

  • Red Hat Enterprise Linux 9.2

  • Red Hat Enterprise Linux 9.1

  • Red Hat Enterprise Linux 9

  • Red Hat Enterprise Linux 8.8

  • Red Hat Enterprise Linux 8.7

  • Red Hat Enterprise Linux 8.6

  • Red Hat Enterprise Linux 7.9

  • SUSE Linux Enterprise Server 15 SP4

  • SUSE Linux Enterprise Server 12 SP5

  • Oracle Linux 9.2

  • Oracle Linux 9.1

  • Oracle Linux 9

  • Oracle Linux 8.8

  • Oracle Linux 8.7

  • Oracle Linux 8.6

  • Oracle Linux 7.9

  • Cent OS 7.9

NOTE:The UNIX Remote Deployment wizard uses the su command to access the root account on the computer on which you want to install Change Guardian Agent for UNIX. The root password is used by the wizard only at installation and is not stored.

Change Guardian Event Collector AddOn for Windows

  • Microsoft Windows Server 2022

  • Microsoft Windows Server 2019

NOTE:The Event Collector Add-On is not supported on Server Core option of the mentioned platforms.

Change Guardian Configuration Scanner

  • Microsoft Windows Server 2022

  • Microsoft Windows Server 2022 Core

  • Microsoft Windows Server 2019

  • Microsoft Windows Server 2016

  • Microsoft Windows Server 2016 Core

NOTE:Change Guardian Configuration Scanner does not run in FIPS mode.

NOTE:Change Guardian Server Soft Appliance is built on SLES 12 SP5.

IMPORTANT:

  • Ensure that you have the latest patch levels on all the agents for the agent to function efficiently.

  • FIPS mode is supported only for Change Guardian. Change Guardian is not supported if the operating system is in FIPS mode.

  • Change Guardian is not certified on Open Enterprise Server installations of SLES.

Supported Application Versions

Application Name

Versions

Microsoft Active Directory and Group Policy

  • Windows Server 2022

  • Windows Server 2019

  • Windows Server 2016

Microsoft Exchange

  • Microsoft Exchange Server 2019

  • Microsoft Exchange Server 2016

Dell EMC

  • Isilon 8.1.0.4

  • Unity 4.4

NetApp Storage System

  • Data ONTAP 9.13.1

  • Data ONTAP 9.11.1

Azure AD

Not applicable

AWS (Identity)

Not applicable

Office 365

Not applicable

Integration with Other Softwares

Component Name

Versions

Secure Configuration Manager

7.2

Sentinel Enterprise

8.6.0.1

8.6

ArcSight Logger

7.3.0

Splunk Enterprise Security

9.0.1

Directory Resource Administrator

10.2.3

10.2.2

Syslog

4.1.1

SmartConnector

8.4

Web Browsers for Change Guardian Web Console

Component Name

Browsers

Change Guardian Web Console

Latest version of the following:

  • Google Chrome

  • Mozilla Firefox

  • Microsoft Edge

Client Software

Component Name

Softwares

Change Guardian Policy Editor

Microsoft .NET Framework 4.6.2 or later

1.2 Recommended Hardware Requirements

Component

Hardware

Change Guardian Server

CPU: 8 Cores

RAM: 24 GB

For standard installation, available free hard disk space: 50 GB or more

For Appliance installation, available free hard disk space: 100 GB or more

2.0 Performance Sizing Guidelines

Category

250 Monitored Agents

1000 Monitored Agents

1000+ Monitored Agents

Total System Capacity

EPS Capability

200 EPS

500 EPS

500+ EPS

Alerts per Minute

10 APM

10 APM

10+ APM

Change Guardian Server Hardware

CPU

Two Intel Xeon 3-GHz (4 core) E5450 CPUs (8 cores total), without Intel HT Technology

Two Intel Xeon 3-GHz (8 core) E5450 CPUs (16 cores total), without Intel HT Technology

Contact OpenText Services

Primary Storage:Primary indexed event data optimized for fast retrieval.

500 GB 7.2k RPM drive

4 x 300 GB SAS 15k RPM (Hardware RAID 10)

Memory

24 GB

32 GB

Data Collection

Change Guardian Policies Used

  • Event Types: File Integrity

  • Agent Type: Windows Agents

  • Number of Agents: 200

  • EPS per Agent: 1

Set 01:

  • Event types: File System

  • Agent Type: Unix Agents

  • Number of Agents: 2

  • EPS per Agent: 200

Set 02:

  • Event Types: Processes/Daemons

  • Agent Type: Unix Agents

  • Number of Agents: 1000

  • EPM per Agent: 6

Contact OpenText Services

Total

  • Total Agents: 200

  • Server EPS: 200

  • Filtered: 0%

  • Total Agents: 1000+

  • Server EPS: 500

  • Filtered: 0%

Change Guardian NetApp Module

3000 EPS NetApp Events with 1 Change Guardian Agent for UNIX.

NOTE:You must install Change Guardian Agent for UNIX on a supported RHEL or SLES Linux platform to monitor NetApp.

Data Storage

How far into the past will users search for data on a regular basis?

Amount of locally cached data for higher search performance.

7 days

Contact OpenText Services

What percentage of searches will be over data older than the number of days above?

Impacts the amount of input/output operations per second (IOPS) for local storage.

 

10%

How far into the past must data be retained?

Impacts how much disk space is required to retain all the data. If secondary storage is enabled, this impacts the size of secondary storage. Otherwise, it impacts the size of primary storage.

 

14 days

User Activity

How many users will be active at the same time, on average?

Impacts the amount of IOPS for primary and secondary storage and other items.

 

1

Contact OpenText Services

How many searches will an active user be performing at the same time, on average?

Impacts the amount of IOPS for primary and secondary storage.

1

1M events per search

1

1M events per search

How many reports will an active user be running at the same time, on average?

Impacts the amount of IOPS for primary and secondary storage

1

200k events per report

1

500k events per report

How many real-time alert views will be running at the same time, on average?

3

(whenever)

 

How many alert dashboards will be running at the same time, on average?

1

(7 days)

How many alert widgets per dashboard will be running at the same time, on average?

2

(whenever)

 

2.1 Change Monitoring Dashboard Performance

The Chart view might take about 25 seconds to load events up to 500,000, while the Grid view might load in five seconds with a similar number of event. Any operation, such as grouping and sorting, with events upto 500,000 events on the Grid view might take about 40 seconds to process and display.

If there are around 500,000 to 1,000,000 events, the Chart view loads in a minute, and the Grid view loads in half a minute. Any operation on the Grid view with around 50,00,00 and 10,00,000 events might take one and a half minute to process and display.

Similarly, if there are 1,000,000 to 1,500,000 events, the Chart view takes about a minute and a half to load, the Grid view takes about half a minute to load, and operations on the Grid view takes about two minutes to process and display.

2.2 Performance of Single Change Guardian Agent

Following are observations about the events generated per second from Change Guardian Agent for Windows and Change Guardian Agent for UNIX:

  • The EPS count might vary with an increase in time interval and increase in the number of events generated in one burst.

  • EPS count depends upon the number of files present in the folder if the folder is monitored for file integrity.

  • EPS count might vary with the hardware configuration of the agent machine.

  • EPS count might vary when there is monitoring of a combination of agents, such as Microsoft Windows and Active Directory, or Active Directory and Group Policy, or Active Directory and file integrity.

3.0 Legal Notice

For information about OpenText legal notices, see https://www.opentext.com/about/legal/

Copyright © 2024 OpenText or one of its affiliates.