search

cerebrate-project / cerebrate

Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other security tools.
https://www.cerebrate-project.org/
GNU Affero General Public License v3.0
82 stars 16 forks source link

Question: Adding a New Cerebrate instance for MISP #147

Open Jade1420 opened 1 year ago

Jade1420 commented 1 year ago

Hi,

This is more a question than an issue. I am currently researching how to integrate Cerebrate to monitor my two MISP instances/servers. I was wondering if it would be best to integrate it into my edge server, where MISP is also installed, or if I should dedicate a new virtual machine running on Ubuntu Linux only for running Cerebrate.

Thanks in advance for your input!

adulau commented 1 year ago

Hi,

I think it's a matter of security architecture within your organisation. There is no specific issue to install Cerebrate and MISP on the same instances, it will be just two different virtual hosts. On our side, we usually use dedicated LXD/LXC container for the Cerebrate instance and have other ones for MISP instances. But it's more for a system admin perspective than something else. It allows to make snapshot and move Cerebrate or MISP in different networks at a later stage.

I hope this answers your question.