locked
Multiple ATA Centers possible? RRS feed

  • Question

  • Hello,

    We work on a very big network and can't afford to dedicate enough resources for a single ATA center that can support the entire network. Is is possible to dispense multiple ATA centers via load balancing or some other way?

    We really don't want to give up on the behavioral analytics, and can setup multiple centers that will use the same DB, or implement almost any other possible solution.

    Thank you in advance for your time and help!

    Tuesday, April 30, 2019 5:33 PM

All replies

  • Yes and No.

    Technically, it is possible to segment the network to several Centers, like few domains each,
    ATA won't block you from doing that, but you will lost "cross segment" detection, as those Centers don't load balance nor talk to each other, those will be silos, so if an attack takes place across silos most chances are that neither side of the attack will be able to properly detect it.

    A better solution might be AATP, as the back end is an azure service that can scale transparently. 

    Tuesday, April 30, 2019 8:24 PM