Manage Lumu Virtual Appliances

Manage Virtual Appliances

You have the option to manage Virtual Appliances (VA) directly from the Lumu Portal. The virtual appliance allows for full visibility into the compromises inside your network and is available for the main hypervisors.

If you are interested in getting started with Lumu VA, access our Lumu Virtual Appliance documentation.

Create and Activate a Virtual Appliance

You can find the steps for creating a Lumu VA by accessing our documentation on the Lumu Virtual Appliance.

When you first create a Virtual Appliance on the Lumu portal, it remains inactive. To activate the VA, follow the steps on our appliance configuration guide.

Be aware that some appliance information takes about 5 minutes after activation to be updated on the Lumu portal.
VA management area of Lumu portalFigure 1 - VA management area of Lumu portal.

To visualize all the details of the VA you created, go to the Lumu portal, navigate to the menu VA area, and click on the virtual appliance you want to manage.

On the Virtual Appliance details page, you are going to find the following sections:

  1. Appliance details such as its name, status, id, labels, description, and statistics.
  2. VA configuration details such as its version, status, forwarders, and system data.
  3. VA management options: edit, delete and revoke.
  4. VA collectors management area.
  5. VA records view of the last 7 days.
  6. Data group rules to add and edit rules (labels) for traffic categorization.
Virtual Appliance details area of the Lumu portalFigure 2 - Virtual Appliance details area of the Lumu portal.
NOTE: If you have not updated your virtual appliance to version 3.0.1 or higher, we will not be able to detect its configuration settings. To make sure you are running the latest Lumu VA version, simply run the command lumu-appliance upgrade, this will upgrade the VA for the latest version. Consult the VA Command Quick Reference for more information.

Edit a Virtual Appliance

To edit the appliance details, go to the Lumu Portal, navigate to the menu VA area, click on the virtual appliance, and select the option to edit it. In this area, you are able to edit the appliance name, the default label, and the description.

Editing a virtual appliance - Lumu PortalFigure 3 - Editing a virtual appliance.

Revoke a Virtual Appliance

The revoke process generates a new activation code. This option should be used in specific scenarios such as when you lost the activation code, or when cloning the appliance and avoiding using the same credentials, etc.

The revoke action cannot be undone.

To revoke an appliance, go to the Lumu Portal, navigate to the VA area, click on the VA, and select the option to revoke.

Revoking a virtual applianceFigure 4 - Revoking a virtual appliance.

Once you confirm the revoke action, a new activation code will be generated for that Virtual Appliance.

Be sure to record this activation code, as you will not be able to view or this code again once you close the pop-up window.

Delete a Virtual Appliance

The deletion process permanently removes the virtual appliance. This action cannot be undone and should be used when you want to permanently remove the appliance.

To delete an appliance, go to the Lumu Portal, navigate to the VA area, click on the virtual appliance and select the option to delete.

Deleting a virtual applianceFigure 5 - Deleting a virtual appliance.

Working with Grouping Rules

On the Lumu Portal you have the option to create rules for individual assets or groups of assets in order to label the Virtual Appliance’s activities.

Rules are based on CIDRs (Classless Inter-Domain Routing). When you create a rule, all activity coming from a device in which the IP address matches the CIDR will be labeled accordingly to the assigned label. If no match is found in the custom collector rules, the default label is applied.

Labels give you the power to sort your traffic by geography, departments, business units, critical assets, or as needed.

To manage rules for a Virtual Appliance, go to the Lumu Portal and select the corresponding option:

Managing the virtual appliance rules - Lumu PortalFigure 6 - Managing the virtual appliance rules.

You can add, edit, or remove labels for specific IP addresses or a group of IPs.

Managing VA grouping rulesFigure 7 - Managing VA grouping rules.
Be aware that any edit made to an existing collector affects only the data collected after the changes are made and does not apply to any data already collected.

Manage Collectors

You can take advantage of Virtual Appliance Collectors to manage the data collection of your network metadata consult our VA collector documentation for details.

        • Related Articles

        • Virtual Appliance Collectors

          The Lumu Virtual Appliance (VA) offers the option to create VA collectors, a seamless way to integrate network metadata, as well as send your DNS logs through the VA instead of using the VA built-in DNS resolver. In this quick guide, we show you how ...
        • Lumu Virtual Appliance

          The Lumu Virtual Appliance (VA) is a pre-configured lightweight virtual machine solution provided by Lumu Technologies to enable the collection of network metadata of your entire enterprise and forward it to the Lumu cloud with the lowest impact on ...
        • Configure Virtual Appliance

          Once the Virtual Appliance (VA) has been added to the Lumu Portal and imported into a hypervisor it is time to configure the Lumu VA to collect network metadata to illuminate threats, attacks, and adversaries coming from your network. If you are ...
        • Configure VA Collectors

          Once the Virtual Appliance Collector has been added to the Lumu Portal, it is time to configure the VA Collector to send data to Lumu. If you are interested in getting started with Virtual Appliance Collector, access our documentation. Refresh the VA ...
        • Deploy on Azure

          You have the option to deploy Lumu Virtual Appliances as cloud collectors in cloud solutions such as AWS, Azure, and Google Cloud. A Lumu Virtual Appliance (VA) is a virtualized machine that provides all the elements required to collect network ...