Installation/System Requirements

On-Premises Hosting Requirements

  1. ESX (5.5 - 6.5) server

    1. RAM free: minimum of 16 GB for Source, and 1 GB for DAST

    2. Disk Space: minimum of 80 GB for Source, and 40 GB for DAST

    3. CPU Cores: minimum of 4 for Source, and 1 for DAST

  2. Basic knowledge of VMware

AWS-Hosting Requirements

In order to host the Appliance via Amazon Web Services (AWS), you must:

  • Have an AWS account with a Virtual Private Cloud (VPC) and Simple Storage Service (S3) Bucket already set up

  • Have your AWS Security Credentials (Access Keys)

  • Have the AWS CLI Tools installed on the laptop or workstation that will be being used

  • Have appropriate permissions to all accounts

Once you have your AWS account set up — including VPC and S3 Bucket — and the command-line interface (CLI) tools installed on the machine from which you will be setting up your appliance, you can go on to Downloading the Sentinel Appliance.

SAST Require-ments

16 GB RAM minimum; 32 GB RAM recommended

4 CPU minimum; 8 CPU recommended

e.g. t2.xlarge, m4.xlarge

DAST Require-ments

2 GB RAM

2 CPU

e.g. t2.medium

Actual Source memory usage depends on the application; clients with smaller applications may be able to manage with 2 CPUs and 8 GB of RAM. If in doubt, please consult with your support team.

Network Requirements

Make sure that the appropriate port (see #1 below) is open before continuing with the appliance setup process.

  1. The satellite must be able to have outbound access to the Satellite controller.

    Customers Appliance Port TCP Address

    EU DAST/SAST

    Any

    52.28.149.88:443

    US DAST

    Any

    162.223.124.15:443

    Ports 5050 and 6511 are now deprecated.

    US SAST

    Any

    162.223.124.8:443

    Ports 5050 and 6511 are now deprecated.
    While connections originate with the Sentinel appliance, TCP requires that packets are able to pass both ways.

  2. The satellite must be located on a network that has access to the client application (for Continuous Dynamic) and/or code repository (for Sentinel Source).

  3. The satellite must have a valid network IP address via DHCP or static assignment.

By default, the Sentinel appliance is configured to use DHCP. If you do not use DHCP, the Sentinel appliance must be manually reconfigured at boot time (See Configuration Process).

Hostname Requirements (DAST)

For DAST, the Primary and Associated Hostname URLs for the site must not contain underscore characters (_). These will prevent the Sentinel Appliance from connecting to the asset.