Virtual appliance

To deploy the Endpoint Analytics virtual appliance in ESXi, take note of the following requirements and proceed with the deployment process described below:

  • ESXi 6.7 U2+

  • VMware vSphere or vCenter

  • Resources:

    Memory: 8 GB
    Storage: 40 GB
    CPU: 4 cores, 2.0+ GHz

Deploying the OVA template

  1. Contact Plixer Technical Support and use the link they provide (https://files.plixer.com/PACKAGE_PATH_AND_FILENAME) to download the latest VMware virtual appliance package.

  2. Extract the contents of the package to a location on the ESXi server.

  3. In vSphere or vCenter, right-click the host to deploy the appliance to, and then select Deploy OVF Template from the menu.

  4. Select Local file, and then browse to the Endpoint Analytics OVA file before clicking Next.

  5. Provide a name for the virtual appliance and continue to follow the deployment wizard.

  6. When done, verify the configuration in the summary, and then click Finish to import the virtual appliance.

Once the Endpoint Analytics virtual appliance has been imported, right-click on the VM to power it on, and then follow the initial configuration guide to complete the deployment process.

By default, the OVF install includes 2 CPUs, 4GB RAM, 40GB storage, and 2 network adapters. In most cases, this configuration is sufficient. However, if you increase your virtual hardware allocation, you must make those changes within your KVM environment (e.g., increasing RAM via VMware), as they cannot be configured through Endpoint Analytics.

Adding new interfaces

To add a new interface (for ERSPAN traffic) to the Endpoint Analytics virtual appliance, follow these steps:

  1. In vCenter, right click on the Endpoint Analytics VM, and then select Edit Settings….

  2. Select Add New Device, and then select Network Adapter from the dropdown.

After the new interface has been added, it can be configured to receive ERSPAN traffic via the web interface.