Lumu Virtual Appliances

Lumu Virtual Appliance

The Lumu Virtual Appliance (VA) is a pre-configured lightweight virtual machine solution provided by Lumu Technologies to enable the collection of network metadata of your entire enterprise and forward it to the Lumu cloud with the lowest impact on the network operation. To know more about collectors options, consult our deployment and integration guide.

Virtual Appliances are the lighthouses of Lumu within your organization. This solution provides you with the detailed visibility of malicious activity of each private IP address on your network in real-time, besides automatic ingestion of extensive metadata sources such as DNS, net flows, and access logs.
Infrastructure with Lumu VAFigure 1 - Infrastructure with Lumu VA.

Requirements

Virtual Appliances are part of Lumu Insights. This tier allows you to deploy unlimited VA that serve as collectors of network metadata and tell you exactly where the compromises are located.
To know more about Lumu Insights, visit our Lumu Insights article.

Create a Virtual Appliance

Before creating a Virtual Appliance, we recommend getting familiar with our sizing guidelines.

Follow these simple steps to create and download a pre-configured Virtual Appliance for your hypervisor of preference and start illuminating threats and adversaries within your network in a few minutes.

A hypervisor is a software layer that enables multiple virtual systems to share the same physical computing resources. These systems come as virtual machines (VMs). The Lumu Virtual Appliance runs as a virtual machine and is compatible with the most common hypervisors such as VMWare ESX/ESXi, Windows Hyper-V, and Cloud solutions such as  Microsoft Azure, Google Cloud Platform, and Amazon Web Services.

Add a VA

The first step is to name your VA and select or create a default label to which information will be allocated.

  1. Access the Lumu Portal.
  2. Navigate to the Virtual Appliance menu and click on the button to add your first virtual appliance.
Add a virtual applianceFigure 2. Add a virtual appliance.
When creating a Virtual Appliance, you are required to provide the following information:
  1. Name (1): a name for your VA.
  2. Description (2): an optional brief description for the VA.
  3. Default Label (3): the label with which all the captured metadata will be associated by default. 
Create a virtual applianceFigure 3. Create a virtual appliance.
Labels give you the power to sort your traffic by geography, departments, business units, critical assets, or as needed. You can later specify grouping rules for a more granular classification.

Configure a VA

Once you create a virtual appliance you will receive an activation code.

Be sure to record this activation code, once you click Next, you will not be able to view or recover this code again.
Activation code for the VAFigure 4. Activation code for the VA.

Download

You are ready to download your Virtual Appliance. When you click on the download option, you will be able to select your hypervisor from the list.

Download the VA fileFigure 5 - Download the VA file.

Set Up a Virtual Appliance

Once you have created and downloaded the Virtual Appliance file, you should import and configure it, we have created deployment guides for the following hypervisors and Cloud environments:

  1. On-premise deployment:
    1. Deploy on VirtualBox
    2. Deploy on VMware
    3. Deploy on Hyper-V
  1. Cloud Deployment:
    1. Deploy on AWS
    2. Deploy on Azure

        • Related Articles

        • Configure Virtual Appliance

          Once the Virtual Appliance (VA) has been added to the Lumu Portal and imported into a hypervisor it is time to configure the Lumu VA to collect network metadata to illuminate threats, attacks, and adversaries coming from your network. If you are ...
        • Virtual Appliance Collectors

          The Lumu Virtual Appliance (VA) offers the option to create VA collectors, a seamless way to integrate network metadata, as well as send your DNS logs through the VA instead of using the VA built-in DNS resolver. In this quick guide, we show you how ...
        • Manage Virtual Appliances

          You have the option to manage Virtual Appliances (VA) directly from the Lumu Portal. The virtual appliance allows for full visibility into the compromises inside your network and is available for the main hypervisors. If you are interested in getting ...
        • Configure VA Collectors

          Once the Virtual Appliance Collector has been added to the Lumu Portal, it is time to configure the VA Collector to send data to Lumu. If you are interested in getting started with Virtual Appliance Collector, access our documentation. Refresh the VA ...
        • Deploy on VMware Workstation

          The best way to implement Lumu in your network is to delegate DNS resolution tasks to the Lumu Virtual Appliance (VA). A Lumu Virtual Appliance (VA) is a virtualized machine that provides all the elements required to collect network metadata to ...