Lumu Virtual Appliance - Deploy on VirtualBox

Deploy on VirtualBox

The best way to implement Lumu in your network is to delegate DNS resolution tasks to the Lumu Virtual Appliance (VA).

A Lumu Virtual Appliance (VA) is a virtualized machine that provides all the elements required to collect network metadata to provide you with maximum visibility when it comes to identifying compromised network endpoints within your infrastructure.

Requirements

To ensure the Lumu VA works correctly, you must use a supported virtualization platforms’ versions. These are the minimum requirements and supported versions for deploying a Lumu VA on VirtualBox:

  1. Oracle VirtualBox 5+
  2. Oracle VirtualBox Extension Pack

Virtual Appliance Setup

Now that you have created a Lumu Virtual Appliance on the Lumu Portal and downloaded it for VirtualBox, it is time to set up and start the VA.

1. Import the VA into the VirtualBox Manager

You can import the VA file (.ova extension) to Virtual Box using the graphical interface (GUI) or via the command line.

Using GUI

  1. Select the option to import an appliance, the appliance Import wizard is displayed in a new window, click to select the file you downloaded from the Lumu Portal.
Oracle VirtualBox ManagerFigure 1 - Oracle VirtualBox Manager.
  1. After selecting the appliance file, the Import settings screen is displayed:
Review our sizing guidelines to evaluate the virtual hardware requirements we recommend.

VirtualBox appliance settingsFigure 2 - VirtualBox appliance settings.

Using the command line

This is how to import the appliance using the command line (Headless) mode on Ubuntu 18 LTS:

user@host:~$ vboxmanage import <lumu_va_file_name>.ova
2. Validate network settings 

After importing, configure the virtual machine to be operated through a Bridged Network Adapter in order for the network endpoints to reach the Virtual Appliance directly with a non-masked IP address.

Using GUI

  1. Check the network session of the settings menu to select a Bridged Network Adapter:
VirtualBox appliance network settingsFigure 3 - VirtualBox appliance network settings.

Using the command line

This is an example of how to set up a Bridged Network Adapter using the command line (headless) mode on Ubuntu 18 LTS:

user@host:~$ vboxmanage modifyvm "<vm_name>" --nic1 bridged --bridgeadapter1 <host_adapter>

Initialize the Virtual Appliance

The initialization process consists of downloading the latest version of the Virtual Appliance software and performing pre-configuration tasks.

Before starting up the virtual machine, please make sure that the network where the Virtual Appliance is going to operate is connected to the internet. The Virtual Appliance is an integrated device and needs an internet connection to pull its components as well as to upload the DNS resolution information to our cloud platform.
Using GUI
  1. Select the newly created virtual machine to start.
Appliance initialization on VirtualBoxFigure 4 - Appliance initialization on VirtualBox.

Using the command line

This is an example of starting an appliance using the command line (headless) mode on Ubuntu 18 LTS:

user@host:~$ vboxmanage modifyvm "<vm_name>" --vrdeaddress 0.0.0.0 --vrdeport 5926
user@host:~$ vboxmanage startvm "<vm_name>" --type headless
user@host:~$ vncviewer <host_server_ip_address>:5926
You can host more than one headless Virtual Appliance in one physical machine. In order to connect to any given headless virtual appliance, set a different port in the vrdeport property and connect to the given port accordingly. When connecting to a headless virtual appliance using VNC, the vncviewer application will request a password, you should specify a blank password as this is a temporary connection that will be disabled afterward.

Activate and Configure the Virtual Appliance

Once you have installed the Lumu Virtual Appliance, you are ready to activate and explore the VA general settings, see the General Configuration guide.

        • Related Articles

        • Lumu Virtual Appliance

          The Lumu Virtual Appliance (VA) is a pre-configured lightweight virtual machine solution provided by Lumu Technologies to enable the collection of network metadata of your entire enterprise and forward it to the Lumu cloud with the lowest impact on ...
        • Configure Virtual Appliance

          Once the Virtual Appliance (VA) has been added to the Lumu Portal and imported into a hypervisor it is time to configure the Lumu VA to collect network metadata to illuminate threats, attacks, and adversaries coming from your network. If you are ...
        • Virtual Appliance Collectors

          The Lumu Virtual Appliance (VA) offers the option to create VA collectors, a seamless way to integrate network metadata, as well as send your DNS logs through the VA instead of using the VA built-in DNS resolver. In this quick guide, we show you how ...
        • Configure VA Collectors

          Once the Virtual Appliance Collector has been added to the Lumu Portal, it is time to configure the VA Collector to send data to Lumu. If you are interested in getting started with Virtual Appliance Collector, access our documentation. Refresh the VA ...
        • Manage Virtual Appliances

          You have the option to manage Virtual Appliances (VA) directly from the Lumu Portal. The virtual appliance allows for full visibility into the compromises inside your network and is available for the main hypervisors. If you are interested in getting ...