Introduction

Field Effect prioritizes Field Effect-hosted virtual MDR SIEM devices. These vitual MDR SIEMs are hosted by Field Effect in Azure in a number of Azure regions worldwide, including:

• For clients in the USA: eastus2, centralus, westus2
• For clients in Canada: canadaeast, canadacentral
• For clients in the UK: uksouth
• For clients in Asia: eastasia
• For clients in Oceania: australiaeast

There are a number of situations where clients may require a physical MDR SIEM device on-site in their networks - these can be discussed with your Sales representative. On relatively rare occasions, clients need an on-site MDR SIEM device but cannot host a physical one. In such cases, it is possible for a client to self-host an MDR SIEM. More commonly, clients may need to self-host virtual network sensors.

The following table provides the minimum system requirements for self-hosted MDR SIEMs or network sensors. MDR SIEM devices are responsible for receiving and analyzing all traffic from the network is it deployed in, along with traffic being sent from network sensors and endpoint agents. For more on this, see How Field Effect Works.

Requesting a Virtual MDR SIEM device or network sensor

Direct clients will have the opportunity to make this selection while our Sales team scopes your organization's requirements. Partners will be able to scope a client's appliance requirements while onboarding them. Based on your needs, we’ll deliver the appropriate assets including welcome content and deployment guides for your virtual application.