System Requirements
The following system requirements are necessary to ensure you have the best experience with InsightVM and Nexpose.
Hardware requirements
The Security Console and Scan Engine hardware requirements are different because the Security Console uses significantly more resources.
InsightVM does not support running the Security Console in a container. However, the Scan Engine is available as a container image on Docker Hub.
Security Console requirements
At this time, we only support x86_64 architecture.
| Asset volume | Processor | Memory | Storage |
|---|---|---|---|
| 5,000 | 4 cores | 16 GB | 1 TB |
| 20,000 | 12 cores | 64 GB | 2 TB |
| 150,000 | 12 cores | 128 GB | 4 TB |
| 400,000 | 12 cores | 256 GB | 8 TB |
Scan Engine requirements
At this time, we only support x86_64 architecture.
| Asset volume per day | Processor | Memory | Storage |
|---|---|---|---|
| 5,000 assets/day | 2 cores | 8 GB | 100 GB |
| 20,000 assets/day | 4 cores | 16 GB | 200 GB |
Operating Systems
We require an English operating system with English/United States regional settings.
64-bit versions of the following platforms are supported:
| Platform | Versions |
|---|---|
| Linux |
|
| Microsoft Windows |
|
| RedHat |
|
| CentOS |
|
Browsers
We support the most recent version of the following browsers:
- Google Chrome (Recommended)
- Mozilla Firefox
- Mozilla Firefox ESR
- Microsoft Edge
Firewall requirements
Security Console firewall requirements
You must configure your firewall rules to allow outbound connectivity using Port 443. This ensures you can successfully upload data from the Security Console to the Insight Platform.
| Region | Region URL |
|---|---|
| United States - 1 | https://us.api.endpoint.ingress.rapid7.com:443 us.deployment.endpoint.ingress.rapid7.com |
| United States - 2 | https://us2.api.endpoint.ingress.rapid7.com:443 us2.deployment.endpoint.ingress.rapid7.com |
| United States West | https://us3.api.endpoint.ingress.rapid7.com:443 us3.deployment.endpoint.ingress.rapid7.com |
| Europe | https://eu.api.endpoint.ingress.rapid7.com:443 eu.deployment.endpoint.ingress.rapid7.com |
| Canada | https://ca.api.endpoint.ingress.rapid7.com:443 ca.deployment.endpoint.ingress.rapid7.com |
| Japan | https://ap.api.endpoint.ingress.rapid7.com:443 ap.deployment.endpoint.ingress.rapid7.com |
| Australia | https://au.api.endpoint.ingress.rapid7.com:443 au.deployment.endpoint.ingress.rapid7.com |
For additional IP addresses for each region see Connectivity requirements.
Scan Engine firewall requirements
If firewalls are present on your network, make sure you whitelist the necessary ports for your Security Console and Scan Engine host according to the communication method of your choice. Consult the following table for port whitelist requirements.
| Source | Destination | Port | Protocol | |
|---|---|---|---|---|
| Console-to-Engine | Console | Scan Engine | 40814 | TCP |
| Engine-to-Console | Engine | Console | 40815 | TCP |
Ports
The ports shown in this table are the default ports used by the Security Console and Scan Engine. If you modify these default ports during the deployment procedure, make sure your firewall rules match your port modifications.