View detailed Service Gateway system requirements based on service deployment.
The Service Gateway virtual appliance supports local deployment on VMware ESXi 6.5,
                  6.7, 7.0, or 8.0, on Windows Server 2019, 2022, and 2025 with Hyper-V enabled, and
                  on Nutanix AHV clusters. Cloud deployments are supported on AWS, Azure, and Google
                  Cloud Platform (GCP). Service Gateway does not support deployment as a nested virtual
                  machine.
The Service Gateway virtual appliance supports two types of
                  appliance specifications to choose from, depending on predicted traffic usage:
- 
Standard image: 12 CPUs, 16 GB memory, 500 GB storage
 - 
Minimal image: 8 CPUs, 12 GB memory, 200 GB storage
 
ImportantWhen configuring multiple services, you must allocate the
                                 minimum virtual CPU and virtual memory requirement per service to ensure proper
                                 functionality. 
For example, to configure a Service Gateway with the minimum
                                 requirements for both  
TippingPoint log forwardingand TippingPoint policy management(rounding up to logical units): 
  | 
| 
 Service 
 | 
 Virtual CPUs (Minimum / Recommended) 
 | 
 Virtual Memory (Minimum / Recommended) 
 | 
 Virtual NICs 
 | 
 Supported Products 
 | 
| 
 Firmware 
 | 
 2 / 4 
 | 
 4 GB / 8 GB 
 | 
 1 
 | 
|
| 
 ActiveUpdate 
 | 
 1 / 2 
 | 
 2 GB / 4 GB 
 | 
 1 
 | 
  | 
| 
 On-premises directory connection 
 | 
 2 / 4 
 | 
 4 GB / 8 GB 
 | 
 1 
 | 
  | 
| 
 Forward Proxy 
 | 
 3 / 6 
 | 
 4 GB / 8 GB 
 | 
 1 
 | 
 Endpoint agents (including Standard Endpoint Protection agents, Server & Workload
                              Protection agents, and Endpoint Sensor agents) installed on the following operating
                              system types: 
  | 
| 
 Generic Caching Service 
 | 
 3 / 6 
 | 
 4 GB / 8 GB 
 | 
 1 
 | 
  | 
| 
 TippingPoint log forwarding 
 | 
 1 / 2 
 | 
 2 GB / 4 GB 
 | 
 1 
 | 
 TippingPoint Security Management System 5.5.4 and 6.0.0 
Requires an API key. To obtain the key, go to  and click Manage API Key. 
 | 
| 
 Nessus Pro 
 | 
 0.5 / 1 
 | 
 500 MB / 1 GB 
 | 
 1 
 | 
 Nessus Pro 
For more information, see Nessus Pro integration. 
 | 
| 
 Rapid7 - Nexpose 
 | 
 0.5 / 0.5 
 | 
 500 MB / 1 GB 
 | 
 1 
 | 
 Rapid7 - Nexpose 
 | 
| 
 Smart Protection Services 
 | 
 2 / 4 
 | 
 2 GB / 4 GB 
 | 
 1 
 | 
 For more information on Smart Protection Services
                              support, see Smart Protection Services product
                                 support. 
 | 
| 
 Suspicious Object List synchronization 
 | 
 1 / 2 
 | 
 2 GB / 4 GB 
 | 
 1 
 | 
 Requires an API key. To obtain the key, go to  and click Manage API Key. 
 | 
| 
 Syslog Connector 
 | 
 2 / 4 
 | 
 500 MB / 1 GB 
 | 
 1 
 | 
 For more information, see Third-Party Integrations. 
 | 
| 
 Third-party intelligence synchronization 
 | 
 1 / 2 
 | 
 2 GB / 4 GB 
 | 
 1 
 | 
 For more information, see Third-Party Integrations. 
 | 
| 
 Third-Party Log Collection Service 
 | 
 The minimum and recommended requirements for this service depend on the predicted
                              number of logs per second (LPS):
                               
  | 
 4 GB / 8 GB 
 | 
 1 
 | 
 For more information, seeThird-Party Log Collection
 
 | 
| 
 TippingPoint policy management 
 | 
 0.5 / 0.5 
 | 
 768 MB / 768 MB 
 | 
 1 
 | 
  | 
| 
 ZTSA On-Premises Gateway 
 | 
 4 / 12 
 | 
 8 GB / 16 GB 
 | 
 1 
 | 
 For more information, see Internet Access and AI Service Access configuration. 
 | 
| 
 ZTSA On-Premises Gateway with AI 
 | 
 8 / 16 
 | 
 20 GB/ 28 GB 
 | 
 1 
 | 
 For more information, see Internet Access and AI Service Access configuration.  
Request to use standard image. 
 | 
Note
  | 
		