Network interface management

In addition to the default management interface, you can add extra network interfaces to your IBM® QRadar® appliances to provide alternative network connectivity.

Use extra network interfaces for the following purposes:
  • Provide a dedicated crossover connection between high-availability (HA) peers. You configure a crossover connection during HA setup.
  • Provide a dedicated data collection interface for inbound events or external flow sources. TCP-based data sources must be in the same subnet as the data collection interface.
  • Increase bandwidth and add fault tolerance by bonding interfaces.

Use a regular network interface card for:

  • Data collection (logs/flows(NetFlow/s Flow))
  • Web UI
  • Backup/restore (not limited to iSCSI but can be NFS)
Note: WinCollect configurations that are connected to a non-managed port are not supported.