Jun 06 2020 05:50 AM
Hello,
Can you tell me if the capacity information "we send only 1-3% of the total traffic to the service for processing." is current?
If so, would I use the network performance data captured in the capacity planning tool?
https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-capacity-planning
Would I use 1-3% of Max Packet /secs column?
Thank you
Jun 06 2020 02:44 PM
@bryanb That would be a very very rough estimation, as the actual values heavily depends on the DC's traffic mix.
Honestly the only way to really test it is post deployment.
What I can tell you is that I never heard about a customer where the actual upload rate became an issue...
Jun 06 2020 02:48 PM
@EliOfek Thanks for the response.
We have several hundred domain controllers and we need to make sure we forecast the impact to our WAN and outbound internet connections.
Is there a better way to estimate outbound traffic capacity?
Bryan
Jun 06 2020 03:35 PM
@bryanb The best way will be to install the sensor on some of the busiest DCs and measure post deployment the impact on outgoing traffic from those machines to the internet. assuming your network traffic mix is similar across the sites, you will get more accurate numbers...
Again, the impact should be relatively small, so most customers don't even bother to check it.
Jun 07 2020 05:49 AM
@EliOfek
Good morning,
Another question around capacity. We currently have ATA implemented in a few of the domains that will be migrated to ATP. Is there any data we can use in ATA to forecast the capacity for ATP?
Jun 07 2020 06:16 AM
@bryanb I don't think so... they work very differently, because AATP is cloud based, it needs to transmit more data to the cloud compared to ATA which saves a lot of data locally.
Also, AATP has lot more data sources, so this is also a factor. at best, measuring the traffic fro teh gateways to the Center will give you maybe a min capacity, but I never tried that.