Deploy the Deep Discovery Inspector virtual appliance on VMware ESXi, Microsoft Hyper-V, or CentOS KVM.
For more details about the specific versions of hypervisors supported by Deep Discovery Inspector, see the Deep Discovery Inspector (Virtual Appliance) Installation section in the Deep Discovery Inspector Installation and Deployment Guide at https://docs.trendmicro.com/en-us/enterprise/deep-discovery-inspector.aspx.
Deep Discovery Inspector Activation Code for licensing
Deep Discovery Director token for integration
(Optional) Trend Micro Sandbox as a Service (Virtual Analyzer) Activation Code for licensing
If Trend Micro Vision One is unable to provide a company-specific disk image, a notification appears after you click Download Disk Image. When this occurs, you need to activate Deep Discovery Inspector and connect to Trend Micro Vision One manually.
For more information, see Activating a Deep Discovery Inspector License Using the Customer Licensing Portal, and Connecting a Deployed Deep Discovery Inspector.
Click Copy disk image SHA-256 hash value and then use this value to verify that the downloaded disk image is authentic.
Trend Micro recommends new Network Inventory users to test the Deep Discovery Inspector virtual appliance first.
For more information, see Virtual Machine Specifications for Trial Deployments
Trend Micro recommends the following specifications.
Virtual CPUs: 12
The virtual CPUs require a minimum speed of 2.5 GHz with hyper-threading support, Virtualization Technology (VT), and 64-bit architecture.
Virtual Memory: 32 GB
Virtual Disk: 1000 GB
Virtual NICs: 3
Trend Micro recommends using the VMXNET 3 network adapter on ESXi, and the VirtIO or E1000 network adapters on CentOS KVM.
The Installation DVD screen appears.
To skip the system requirements check, type 3 and press ENTER.
By default, the installer performs a system requirements check before installing Deep Discovery Inspector to confirm that the appliance has the necessary resources to run the product.
Skip the system requirements check if you are testing the product before installing it on the network.
To start installing Deep Discovery Inspector, type 2 and press ENTER.
To obtain installation logs (used for troubleshooting installation problems), type 3 and press ENTER.
Deep Discovery Inspector automatically detects the active link cards (indicated by Link is UP) available for use as a management port.
If a status conflict exists, select Re-detect and press ENTER.
If you enabled installation log export on the System Information screen, a list of storage devices is displayed on the Export Installation Logs screen.
Trend Micro recommends saving exported installation logs to sda11.
Record the file name for future reference.
The file name is in the following format:
Navigate to Re-detect.
Press ENTER to refresh the list.
The system automatically restarts and the preconfiguration console appears.
The preconfiguration console main menu appears.
The Device Settings screen appears.
The IP address that you configure on the Device Settings screen is the management console address.
The Log On screen appears.
The Change Password window appears.
The Setup Guide window appears.
Use the following steps to verify the integration.
Some company-specific images automatically activate Deep Discovery Inspector and connect the network sensor to Trend Micro Vision One.
If your company-specific image does not automatically activate Deep Discovery Inspector and connect the network sensor, then perform the steps in Connecting a Deployed Deep Discovery Inspector.
It may take several minutes for the network sensor to appear in the Network Inventory. Additionally, when Deep Discovery Inspector is trying to connect to Trend Micro Vision One, a global notification appears in the Deep Discovery Inspector management console.
If the network sensor is not in the Network Inventory, connect the network sensor.
For more information, see Connecting a Deployed Deep Discovery Inspector.
At https://docs.trendmicro.com/en-us/enterprise/deep-discovery-inspector.aspx, see the Deep Discovery Inspector Administrator's Guide for details about configuring and administering Deep Discovery Inspector.
Configure Sandbox as a Service to send Virtual Analyzer Suspicious Objects and Virtual Analyzer Results to Trend Micro Vision One.
To access Network Analytics reports from the Workbench app, you must first configure specific product settings.
For more information, see Configuring Directly Connected Network Sensors.