Multi-Tenant Deployment Options for Managed Service Providers or Multiple Organizations
While a common use case for FortiSIEM is the monitoring of IT infrastructure for a single enterprise, Managed Service Providers (MSPs) and large enterprises with multiple organizations can also use FortiSIEM to monitor IT infrastructure at the customer or organization level, either by splitting IP addresses to correspond to the customer or organization, or by deploying Collectors for each customer or organization and managing the monitoring and analysis of their data from a centralized Supervisor.
Standalone Supervisor Deployment for Multi-Tenancy
Supervisor and Worker Cluster Deployment for Multi-Tenancy
Supervisor with Collectors Deployment for Multi-Tenancy
Matrix of Multi-Tenancy Deployment Configuration Options
Standalone Supervisor Deployment for Multi-Tenancy
FortiSIEM allows users to create organizations, to and manage the entire IT infrastructure monitoring life cycle from data collection, storage, analytics and alerting for an organization that organization as a separate entity from other organizations. There are several use cases for this this multi-tenant model.
Hosting service providers that host multiple customers in their own data center
Managed service providers that manage a customer’s data centers from their own data center
Large enterprises that want to manage separate parts of the organization as individual customers
The simplest multi-tenancy deployment involves a single Supervisor, with organizations defined through the splitting of IP address ranges. For example:
Page
Supervisor and Worker Cluster Deployment for Multi-Tenancy
As the number of monitored devices, or the analyzed event rate, grows, one Supervisor may not be able to handle the load. In that case, you can deploy a cluster of Supervisor and Worker virtual appliances that share data over NFS. In a cluster deployment, the Supervisor and Worker nodes have specific functions:
10.1.2.0/24 = Customer 2
During the discovery process, the AccelOps Supervisor node will tag a device with the correct customer ID based on the IP address definition.