Virtual Appliance Requirements¶
Before beginning installation, please be sure to have a host system with the following resources available:
- A system with the ability to run a VM image and at least 8 GB of assigned memory.
- At least 30 GB of free disk space to accommodate the base VM image. If you choose to increase the VM disk size ensure the extra space is available on the VM host system.
- At least one IP address for the Appliance. By default, the VM Appliance will obtain an IP address from a DHCP server, if one is available. Otherwise, a fixed address, netmask, and optional gateway may be assigned during the installation process. If there is a DHCP server available, but a static IP address is to be assigned, this may be set during the configuration process.
The following hardware recommendations are to be used as a general guide. Enterprise networks can vary in performance, capacity, protocols, and overall activity. Resource requirements to consider for deployments include raw network speed, the size of the network being monitored, and the configuration of the application. Processors, memory, and network cards will be heavily based on the former. Disk space requirements will vary depending on usage based on the amount and length of time data is stored on the system.
|Hosts Managed||CPU Cores||Memory||Disk Space|
|2,500 active IPs||4 2GHz cores||8 GB RAM||30 GB|
|10,000 active IPs||8 3GHz cores||16 GB RAM||250 GB|
|25,000 active IPs||16 3GHz cores||32 GB RAM||1 TB|
|100,000 active IPs||32 3GHz cores||64 GB RAM||2 TB|
Along with the IP address, the following values must be configured for the VM Appliance to be network accessible:
- The network subnet mask for the Appliance.
- The IP address of the Default Gateway for the Appliance (if applicable).
- The IP addresses of the DNS servers for the Appliance (if applicable).
- A hostname for the Appliance.
- The local network must be configured to allow outbound HTTPS (port 443) access to the Internet, so the Appliance can download the updates and vulnerability database.
- The IP addresses for the hosts to be scanned must be accessible to the Appliance. The Appliance must be able to resolve external DNS for the hostnames to be scanned.
If you have connected the LAN interface to a 802.1q trunked port and need your Scanner Appliance to use VLAN tags on the LAN default network, enter the VLAN tag number using the Appliance console.
DHCP or Static IP¶
By default the Scanner Appliance is pre-configured with DHCP. If configured with a static IP address, be sure you have the IP address, netmask, default gateway, primary DNS and WINS server (if appropriate).
Check that the appliance has access to
*.amazonaws.com to download the security updates, the
vulnerability database and other updates.