Lumu Virtual Appliance - Deploy on VirtualBox

Deploy Lumu VA in VirtualBox

Lumu Virtual Appliance (VA) is a virtualized machine that provides you with all the elements required to collect network metadata to provide you with maximum visibility when it comes to identifying compromised network endpoints within your infrastructure. This guide provides instructions on configuring Lumu VA in Oracle VirtualBox.

Requirements

To ensure the Lumu VA works correctly, you must use a supported virtualization platforms’ versions. These are the minimum requirements and supported versions for deploying Lumu VA in VirtualBox:

  1. Oracle VirtualBox 5+
  2. Oracle VirtualBox Extension Pack

Virtual Appliance Setup

Now that you have created and downloaded a pre-configured image of Lumu Virtual Appliance for VirtualBox, it is time to set up the VA.

1. Import the VA into the VirtualBox Manager

You can import the VA file (.ova extension) to Virtual Box using the graphical interface (GUI) or via the command line.

Using GUI

  1. Select the option to import an appliance. The appliance Import wizard is displayed in a new window. Click to select the file you downloaded from the Lumu Portal.
Oracle VirtualBox Manager Oracle VirtualBox Manager
  1. After selecting the appliance file, the Import settings screen is displayed:
Review our  sizing guidelines to evaluate our recommended virtual hardware requirements.

VirtualBox appliance settings VirtualBox appliance settings

Using the command line

This is how to import the appliance using the command line (Headless) mode on Ubuntu 18 LTS:

user@host:~$ vboxmanage import <lumu_va_file_name>.ova
2. Validate network settings 

After importing, configure the virtual machine to be operated through a Bridged Network Adapter for the network endpoints to reach the Virtual Appliance directly with a non-masked IP address.

Using GUI

  1. Check the network session of the settings menu to select a Bridged Network Adapter:
VirtualBox appliance network settings VirtualBox appliance network settings

Using the command line

This is an example of how to set up a Bridged Network Adapter using the command line (headless) mode on Ubuntu 18 LTS:

user@host:~$ vboxmanage modifyvm "<vm_name>" --nic1 bridged --bridgeadapter1 <host_adapter>

Initialize the Virtual Appliance

The initialization process consists of downloading the latest version of the Virtual Appliance software and performing pre-configuration tasks.

Before starting up the virtual machine, please make sure that the  network where the Virtual Appliance operates is connected to the internet. The Virtual Appliance is an integrated device and needs an internet connection to pull its components as well as to upload the DNS resolution information to our cloud platform.
Using GUI
  1. Select the newly created virtual machine to start.
Appliance initialization on VirtualBox Appliance initialization on VirtualBox

Using the command line

This is an example of starting an appliance using the command line (headless) mode on Ubuntu 18 LTS:

user@host:~$ vboxmanage modifyvm "<vm_name>" --vrdeaddress 0.0.0.0 --vrdeport 5926
user@host:~$ vboxmanage startvm "<vm_name>" --type headless
user@host:~$ vncviewer <host_server_ip_address>:5926
You can host more than one headless Virtual Appliance in one physical machine. To connect to any given headless virtual appliance, set a different port in the vrdeport property and connect to the given port accordingly. When connecting to a headless virtual appliance using VNC, the vncviewer application will request a password, you should specify a blank password as this is a temporary connection that will be disabled afterward.

Activate and Configure the Virtual Appliance

Once you have installed the Lumu Virtual Appliance, you are ready to activate and explore the VA general settings. See Lumu VA configuration guide for guidance.


        • Related Articles

        • Deploy Virtual Appliances

          To get started and review requirements for Lumu Virtual Appliances, consult our document Introduction to Virtual Appliances. Follow these simple steps to create and download a pre-configured Virtual Appliance and start illuminating threats and ...
        • Deploy Lumu VA in VMware ESXi

          Lumu Virtual Appliance (VA) is a virtualized machine that provides you with all the elements required to collect network metadata to provide you with maximum visibility when it comes to identifying compromised network endpoints within your ...
        • Deploy Lumu VA in VMware Workstation

          Lumu Virtual Appliance (VA) is a virtualized machine that provides you with all the elements required to collect network metadata to provide you with maximum visibility when it comes to identifying compromised network endpoints within your ...
        • Deploy Lumu VA in Azure

          Lumu Virtual Appliance (VA) is a virtualized machine that provides you with all the elements required to collect network metadata to provide you with maximum visibility when it comes to identifying compromised network endpoints within your ...
        • Lumu Virtual Appliance Collectors

          To get started with Lumu Virtual Appliances, consult our Introduction to Lumu Virtual Appliances article. The Lumu Virtual Appliance (VA) is a pre-configured lightweight virtual machine solution that collects the network metadata of your entire ...