The best way to implement Lumu in your network is to delegate DNS resolution tasks to the Lumu Virtual Appliance (VA).
A Lumu Virtual Appliance
(VA) is a virtualized machine that provides all the elements required to collect network metadata to provide you with maximum visibility when it comes to identifying compromised network endpoints within your infrastructure.
To ensure the Lumu VA works correctly, you must use a supported virtualization platforms’ versions. These are the minimum requirements and supported versions for deploying Lumu VA on VMware:
- VMware Workstation 15+.
Now that you have created a Lumu Virtual Appliance and selected the option to download it for VMware, it is time to set up and start the VA.
1. Import the VA into the VMware
You can import the VA file (.ova extension) to VMware using the graphical interface (GUI) or via the command line.
- From VMware panel, select the option to import, the Import wizard is displayed in a new window, click to select the file you downloaded from the Lumu Portal.
Figure 1 - Importing the VA into the VMware Workstation.
- After importing the appliance file, you can check and edit the settings:
Review our sizing guidelines
to evaluate the virtual hardware requirements we recommend.
Figure 2 - VA settings on VMware Workstation.
Using the command line
- This is how to import the appliance using command line (Headless) Mode Ubuntu 18 LTS:
user@host:~$ ovftool ~/<directory_path>/<lumu_va_file_name>.ova ~/vmware/
Initialize the Virtual Appliance
The initialization process consists of downloading the latest version of the Virtual Appliance software and performing pre-configuration tasks.
Before starting up the virtual machine, please make sure that the network where the Virtual Appliance is going to operate is connected to the internet. The Virtual Appliance is an integrated device and needs an internet connection to pull its components as well as to upload the DNS resolution information to our cloud platform.
- Select the newly created virtual machine, select the option to power on, and the machine will initialize.
Figure 3 - VA start process on VMware Workstation.
Using the command line
- First, edit the VA .vmx (virtual machine configuration) file, add RemoteDisplay.vnc.enabled = “TRUE”, and save it. This will modify the virtual machine to allow connection over VNC, while running the Virtual Appliance for the first time in headless mode.
This is an example of starting an appliance using the command line (Headless) mode on Ubuntu 18 LTS:
user@host:~$ vmrun start ~/<directory_path>/<lumu_va_configuration_file_name>.vmx nogui
user@host:~$ vncviewer <host_server_ip_address>:5900
You can host more than one headless Virtual Appliance in one physical machine. In order to connect to any given headless virtual appliance, edit the.vmx file, set a different port in the RemoteDisplay.vnc.port property, and connect to the given port accordingly. Remember, the default value for the VNC port is 5900. When connecting to a headless virtual appliance using VNC, the vncviewer application could request a password, you should specify a blank password as this is a temporary connection that will be disabled afterward.
Activate and Configure the Virtual Appliance
Once you have installed the Lumu Virtual Appliance, you are ready to activate and explore the VA general settings, see the General Configuration guide.