For an initial proof of concept (POC) or a small site with fewer than 3000 Traps agents, use a standalone deployment to install the following Endpoint Security Manager (ESM) components on a single server or virtual machine:
- ESM Server
- ESM Console
- Forensic (quarantine) folder
- (Recommended) WildFire integration
- (Optional) Load balancer for distributing traffic across ESM Servers
- (Optional) External logging platform, such as an SIEM or syslog
For best practices on using a phased approach for installing Traps on endpoints, see Recommended Traps Deployment Process .