Lumu Virtual Appliance (VA) is a virtualized machine that provides you with all the elements required to collect network metadata to provide you with maximum visibility when it comes to identifying compromised network endpoints within your infrastructure. This guide provides instructions on configuring Lumu VA in Oracle VirtualBox.
Requirements
To ensure the Lumu VA works correctly, you must use a supported virtualization platforms’ versions. These are the minimum requirements and supported versions for deploying Lumu VA in VirtualBox:
- Oracle VirtualBox 5+
- Oracle VirtualBox Extension Pack
Virtual Appliance Setup
Now that you have created and downloaded a pre-configured image of Lumu Virtual Appliance for VirtualBox, it is time to set up the VA.
1. Import the VA into the VirtualBox Manager
You can import the VA file (.ova extension) to Virtual Box using the graphical interface (GUI) or via the command line.
Using GUI
- Select the option to import an appliance. The appliance Import wizard is displayed in a new window. Click to select the file you downloaded from the Lumu Portal.
Oracle VirtualBox Manager
- After selecting the appliance file, the Import settings screen is displayed:
Review our
sizing guidelines to evaluate our recommended virtual hardware requirements.
VirtualBox appliance settings
Using the command line
This is how to import the appliance using the command line (Headless) mode on Ubuntu 18 LTS:
user@host:~$ vboxmanage import <lumu_va_file_name>.ova
2. Validate network settings
After importing, configure the virtual machine to be operated through a Bridged Network Adapter for the network endpoints to reach the Virtual Appliance directly with a non-masked IP address.
Using GUI
- Check the network session of the settings menu to select a Bridged Network Adapter:
VirtualBox appliance network settings
Using the command line
This is an example of how to set up a Bridged Network Adapter using the command line (headless) mode on Ubuntu 18 LTS:
user@host:~$ vboxmanage modifyvm "<vm_name>" --nic1 bridged --bridgeadapter1 <host_adapter>
Initialize the Virtual Appliance
The initialization process consists of downloading the latest version of the Virtual Appliance software and performing pre-configuration tasks.
Before starting up the virtual machine, please make sure that the
network where the Virtual Appliance operates is connected to the internet. The Virtual Appliance is an integrated device and needs an internet connection to pull its components as well as to upload the DNS resolution information to our cloud platform.
Using GUI
- Select the newly created virtual machine to start.
Appliance initialization on VirtualBox
Using the command line
This is an example of starting an appliance using the command line (headless) mode on Ubuntu 18 LTS:
user@host:~$ vboxmanage modifyvm "<vm_name>" --vrdeaddress 0.0.0.0 --vrdeport 5926
user@host:~$ vboxmanage startvm "<vm_name>" --type headless
user@host:~$ vncviewer <host_server_ip_address>:5926
You can host more than one headless Virtual Appliance in one physical machine. To connect to any given headless virtual appliance, set a different port in the vrdeport property and connect to the given port accordingly. When connecting to a headless virtual appliance using VNC, the vncviewer application will request a password, you should specify a blank password as this is a temporary connection that will be disabled afterward.
Once you have installed the Lumu Virtual Appliance, you are ready to activate and explore the VA general settings. See Lumu VA configuration guide for guidance.