How to handle multi-tenancy?
Summit
Newbie ✭
So has anyone figured out a good way to handle multi-tenancy? We manage over 175 client environments and keep wanting to use the Capture client, but from what I've been able to find out, there's no efficient way to address managing different environments from both a technical and licensing/pricing perspective.
My understanding right now is that we would have to purchase licenses for each client individually, then manage each from a different Capture portal. Which in and of itself isn't great (vs. a single portal) but another issue is that we cannot leverage the quantities of "all" seats/licenses in use to reduce our overall cost. The costs would be based on our individual client and not by the total licenses we purchase for all clients (which since we're the partner, I'd think we should be able to do that).
I've been hearing for a long time that this was on the roadmap to be addressed, but I'm curious if any other partners have found a good way to address this in the system that's currently in place.
Answers
Hi @Summit
I've changed your discussion to a question, and am reaching out to a few Capture Client experts to respond here. Stay tuned.
Thanks Chris. I have the same question about hosted email security, but figured I'd post one question at a time!
Hi Summit,
In reference to Capture Client, you would just have to make groups within your MySonicWall for each of your tenants and register the Capture Clients into each of those groups. From there you would be able to manage all of the tenants from a Single Login on the Capture Client Cloud Portal. You would also be able to give admin/user access to each individual Tenant as needed and they would not be able to see all the other Tenant's configurations.
As for the licensing, you would still have to license each of them individually as licensing is a per tenant basis. If you had a single tenant then the nodes could be all used up by a single entity. This reason is also there for the feature of SonicWall based enforced AV with Capture Client as it needs to have the SonicWall and Capture Client tenant in the same group in MySonicWall to work properly.
Thank you
Ben Davis
Western NRG
As you rightly pointed out, multi-tenancy has a licensing and an operational angle to it.
For licensing, to address your requirement, we have 2 options:
For operations, you can manage multiple tenants from a single portal, with the ability to easily switch tenants for cofigurations and policy management. And if you are managing multiple tenants, you will have access to a multi-tenant dashboard available at Overview -> Tenants
"This reason is also there for the feature of SonicWall based enforced AV with Capture Client as it needs to have the SonicWall and Capture Client tenant in the same group in MySonicWall to work properly."
This is interesting, I am currently trialling capture 3.0. The registration on mysonicwall of the trial serial for capture was a little confusing. In the trial I didn't need to associate to a live firewall as its a trial. In reality the clients would likely be behind a sonicwall, so is the serial key for capture adv entered on the firewall (in mysonicwall) for that same customer in this case?
Thanks for the heads up on the first part, so if I am going with this looks like I will have to create a new "Tenant / Group" per customer and put all of their products in the same.