Question: Adding a New Cerebrate instance for MISP

[Jade1420]

Hi,

This is more a question than an issue.
I am currently researching how to integrate Cerebrate to monitor my two MISP instances/servers. I was wondering if it would be best to integrate it into my edge server, where MISP is also installed, or if I should dedicate a new virtual machine running on Ubuntu Linux only for running Cerebrate.

Thanks in advance for your input!

[adulau]

Hi,

I think it's a matter of security architecture within your organisation. There is no specific issue to install Cerebrate and MISP on the same instances, it will be just two different virtual hosts. On our side, we usually use dedicated LXD/LXC container for the Cerebrate instance and have other ones for MISP instances. But it's more for a system admin perspective than something else. It allows to make snapshot and move Cerebrate or MISP in different networks at a later stage.

I hope this answers your question.