We are looking at building a DMVPN which terminates on CSR1000v hub routers. We want to run ZBFW and Snort. The throughput requirements are very small...maybe 100-250Mbps tops. I know I need the security license and the CSR needs to be able to have 8GB of RAM. The RAM I "think" is covered by ordering the 4GB memory upgrade however I am unsure if that is supported on the low end routers or not. The other thing is am I only locked into 1vCPU with the 100-250Mbps bandwidth license? With only 1 vCPU and using snort, it basically uses 1/3 for control, 1/3 for service, and 1/3 for data. I would feel more comfortable with 2vCPU but I fear that means I have to go up to a higher throughput license to be able to support 2vCPU or more.
Does anyone know?