Lumu Virtual Appliance - Deploy on VMware

Deploy on VMware Workstation

The best way to implement Lumu in your network is to delegate DNS resolution tasks to the Lumu Virtual Appliance (VA).

A Lumu Virtual Appliance (VA) is a virtualized machine that provides all the elements required to collect network metadata to provide you with maximum visibility when it comes to identifying compromised network endpoints within your infrastructure.

Requirements

To ensure the Lumu VA works correctly, you must use a supported virtualization platforms’ versions. These are the minimum requirements and supported versions for deploying Lumu VA on VMware:

  1. VMware Workstation 15+.
Note: For deploying Lumu on a VMware Workstation, consult this document.

Virtual Appliance Setup

Now that you have created a Lumu Virtual Appliance and selected the option to download it for VMware, it is time to set up and start the VA.

1. Import the VA into the VMware

You can import the VA file (.ova extension) to VMware using the graphical interface (GUI) or via the command line.

Using GUI

  1. From VMware panel, select the option to import, the Import wizard is displayed in a new window, click to select the file you downloaded from the Lumu Portal.
Importing the VA into the VMware WorkstationFigure 1 - Importing the VA into the VMware Workstation.
  1. After importing the appliance file, you can check and edit the settings:
Review our sizing guidelines to evaluate the virtual hardware requirements we recommend.

VA settings on VMware WorkstationFigure 2 - VA settings on VMware Workstation.

Using the command line

  1. This is how to import the appliance using command line (Headless) Mode Ubuntu 18 LTS:
user@host:~$ ovftool ~/<directory_path>/<lumu_va_file_name>.ova ~/vmware/

Initialize the Virtual Appliance

The initialization process consists of downloading the latest version of the Virtual Appliance software and performing pre-configuration tasks.

Before starting up the virtual machine, please make sure that the network where the Virtual Appliance is going to operate is connected to the internet. The Virtual Appliance is an integrated device and needs an internet connection to pull its components as well as to upload the DNS resolution information to our cloud platform.

Using GUI

  1. Select the newly created virtual machine, select the option to power on, and the machine will initialize.
VA start process on VMware WorkstationFigure 3 - VA start process on VMware Workstation.

Using the command line

  1. First, edit the VA .vmx (virtual machine configuration) file, add RemoteDisplay.vnc.enabled = “TRUE”, and save it. This will modify the virtual machine to allow connection over VNC, while running the Virtual Appliance for the first time in headless mode.

This is an example of starting an appliance using the command line (Headless) mode on Ubuntu 18 LTS:

user@host:~$ vmrun start ~/<directory_path>/<lumu_va_configuration_file_name>.vmx nogui
user@host:~$ vncviewer <host_server_ip_address>:5900
You can host more than one headless Virtual Appliance in one physical machine. In order to connect to any given headless virtual appliance, edit the.vmx file, set a different port in the RemoteDisplay.vnc.port property, and connect to the given port accordingly. Remember, the default value for the VNC port is 5900. When connecting to a headless virtual appliance using VNC, the vncviewer application could request a password, you should specify a blank password as this is a temporary connection that will be disabled afterward.

Activate and Configure the Virtual Appliance

Once you have installed the Lumu Virtual Appliance, you are ready to activate and explore the VA general settings, see the General Configuration guide.

        • Related Articles

        • Deploy on VMware ESXi

          The best way to implement Lumu on your network is to delegate DNS resolution tasks to the Lumu Virtual Appliance (VA). A Lumu VA is a virtualized machine containing all the elements required to collect network metadata and provide you with maximum ...
        • Lumu Virtual Appliance

          The Lumu Virtual Appliance (VA) is a pre-configured lightweight virtual machine solution provided by Lumu Technologies to enable the collection of network metadata of your entire enterprise and forward it to the Lumu cloud with the lowest impact on ...
        • Configure Virtual Appliance

          Once the Virtual Appliance (VA) has been added to the Lumu Portal and imported into a hypervisor it is time to configure the Lumu VA to collect network metadata to illuminate threats, attacks, and adversaries coming from your network. If you are ...
        • Virtual Appliance Collectors

          The Lumu Virtual Appliance (VA) offers the option to create VA collectors, a seamless way to integrate network metadata, as well as send your DNS logs through the VA instead of using the VA built-in DNS resolver. In this quick guide, we show you how ...
        • Configure VA Collectors

          Once the Virtual Appliance Collector has been added to the Lumu Portal, it is time to configure the VA Collector to send data to Lumu. If you are interested in getting started with Virtual Appliance Collector, access our documentation. Refresh the VA ...