Views:

Learn how to deploy your own Virtual Network Sensor on other KVM-based platforms, such as Proxmox VE.

Virtual Network Sensor is a lightweight network sensor that scans your network activity and feeds network activity data to TrendAI Vision One™ and allows you to discover unmanaged assets and gain an overall view of your attack surface. Before using Network Security, you need to set up your Virtual Network Sensor and connect it to TrendAI Vision One™.
While the deployment steps for Virtual Network Sensor may vary across different KVM-based platforms, such as Proxmox VE, the core requirements remain consistent. Use the following procedure to obtain the disk image from TrendAI Vision One™, and then follow the documentation for your KVM-based platform to create the virtual machine.
Before deploying Virtual Network Sensor, do the following:

Procedure

  1. On the TrendAI Vision One™ console, go to Network Security → Network Inventory → Virtual Network Sensor.
  2. Click Deploy Virtual Network Sensor.
    The Virtual Network Sensor Deployment panel appears.
  3. Select KVM for the platform.
  4. Set the Admin password and confirm it.
    The password must contain the following:
    • 12 to 32 characters
    • Both uppercase and lowercase characters
    • At least one number (0-9)
    • At least one special character: ~!`@#$%^&*()/_+=[]{}-\|<>',.?:;" or space
    This step is used to set the default admin password to access the Virtual Network Sensor command line interface after deployment.
  5. Select the Connection method.
    • Direct connection: Virtual Network Sensor connects to TrendAI Vision One™ directly. Make sure the Virtual Network Sensor is able to connect to the internet when using this configuration.
    • Connect using a custom proxy: Virtual Network Sensor connects to TrendAI Vision One™ through a third-party proxy. After choosing this method, configure the following fields:
      • Proxy address: Specify the IP address of the proxy.
      • Proxy port: Specify the connecting port of the proxy.
      • Proxy server requires authentication (optional): Define whether or not the proxy requires authentication credentials.
      • User name: Specify the user name for the proxy credentials.
      • Password: Specify the password for the proxy credentials.
    • Connect using a Service Gateway as proxy: Virtual Network Sensor connects to TrendAI Vision One™ through a Service Gateway. Select a Service Gateway to use for this method.
      Virtual Network Sensor must be able to connect to a Service Gateway with the Forward Proxy Service configured and enabled. For more information, see Manage services in Service Gateway.
  6. Click Download Disk Image.
  7. Extract the disk image ZIP file.
  8. On your KVM-based platform, create a virtual machine for Virtual Network Sensor using the correct settings. Refer to the documentation for your KVM-based platform, such as Proxmox VE, for the exact steps to create and configure the virtual machine. Ensure that the following VM settings are correctly configured before powering on Virtual Network Sensor:
    • CPU and memory: Follow the minimum system requirements defined in Virtual Network Sensor system requirements based on your monitored network throughput.
    • Storage: Mount both vns_system.qcow2 and vns_meta.iso.
      vns_system.qcow2 is preinstalled with Virtual Network Sensor.
      vns_meta.iso contains the metadata required for onboarding Virtual Network Sensor to TrendAI Vision One™.
      If your KVM-based platform does not let you attach both vns_system.qcow2 and vns_meta.iso when creating the virtual machine, use the following workaround:
      1. Create the virtual machine with vns_system.qcow2 only.
      2. Before powering on Virtual Network Sensor, edit the virtual machine to attach vns_meta.iso.
    • NIC: Virtual Network Sensor requires at least two Network Interface Controllers (NIC). The first NIC is used for management and must have internet connectivity. The remaining NICs are used for receiving mirrored network traffic.
  9. Power on the VM to start Virtual Network Sensor.
    Virtual Network Sensor automatically connects to Network Inventory.
  10. To confirm that your Virtual Network Sensor has successfully deployed, go to Network Security → Network Inventory → Virtual Network Sensor on the TrendAI Vision One™ console to view information about your deployed Virtual Network Sensor.
    If Virtual Network Sensor does not appear in Network Inventory after deployment, verify the following settings:
    • Network settings (NIC or vNIC setting and order)
    • Firewall settings
    • Proxy settings if using a proxy
    • Review the Virtual Network Sensor FAQ to verify and test the connection