Install a Modular Sensor in VMware
VMware
When you install a Modular Sensor in
VMware
, you also need to create and specify a port group as well as apply a token to associate it with your CylanceMDR
tenant.- Review the Modular Sensor requirements.
- Obtain a token for the Modular Sensor from theCylanceMDRonboarding team.
- Download the .ova file for the Modular Sensor.
- Log in to thevSphereclient.
- Right-click the VM host on which you want to install the port group and clickAdd Networking.
- Select theVirtual Machine Port Group for a Standard Switchoption.
- ClickNext.
- Enter the following:
- Name: The name for this port group.
- vLAN ID: 4095
- Virtual switch: Select an existing virtual switch that you want to use.
- Promiscuous mode: Accept
- MAC Address changes: Inherit from vSwitch
- Force transmits: Inherit from vSwitch
- In the vSphere client, on the VM host where you want install and deploy the Modular Sensor, specify the following settings.
- OVF template: Specify the Modular Sensor .ova file.
- Virtual machine name: Specify a name for the Modular Sensor VM.
- Compute resource: Specify the compute resource to use for the Modular Sensor VM.
- Storage: Specify the datastore drive to use for VM storage and its configuration.
- Provisioning type: SpecifyThick.
- Network mappings: Select the VM network that you want to use.
- Power On automatically: Deselected.
- Verify the settings and clickFinish.The deployment completes. This might take several minutes.
- After successful deployment, click the VM.
- ClickEdit.
- ClickAdd network adapter.
- Beside theNew adapterfield, select the port group that you created earlier.
- ClickSave.
- Power on the VM.
- Do the following to set a static IP address for the Modular Sensor and apply the token to associate it withCylanceMDR:
- Open the VM for your Modular Sensor. A command line appears.
- Enter your login information. The default username/password is aella/changeme. You are prompted to change the password immediately.
- Set a static IP address for the modular sensor using the following commands:
- set interface management ip <ip_address>
- set interface management gateway <gateway_ip_address>
- set interface management dns <dns_ip_address>
- Enterset token string <token>, where<token>is the token provided by theCylanceMDRonboarding team.The message "Sensor token is successfully set" appears.
- To verify the connection withCylanceMDRuse the following commands:
- show interface
- show cm
- show version
- TheCylanceMDRonboarding team completes the configuration for yourCylanceMDRtenant to receive logs from your Modular Sensor.