Getting started with your new Honeypot or Vulnerability Scanner is exciting. Luckily, we've made it easy for you to start and install your Virtual Appliance, so you won't have to wait too much.
Requirements
Port 443/TCP outgoing (see firewall info).
Honeypot
Recommended:
32 GB Disk (SSD)
2 vCPU
4 GB RAM
Minimum:
32 GB Disk (HDD)
1 vCPU
2 GB RAM
Vulnerability Scanner
Recommended:
32 GB Disk (SSD)
4 vCPUs
8 GB RAM
Minimum:
32 GB Disk (SSD)
2 vCPUs
4 GB RAM
Step 1: Download Virtual Appliance image
First, you have to download the Virtual Appliance image. We have files ready for VMware, Hyper-V, Proxmox, etc. They come in .ova, .vhdx, .vmdk and .qcow2 file extensions. The download link will be available in the Portal at your device management page.
Step 2: Install Virtual Appliance image
After downloading the Virtual Appliance image, we have to create a Virtual Machine with it. Upload the right file to your hypervisor and follow the instructions below.
VMware 6.5+ (.ova file)
VMware makes it very easy to install a Virtual Appliance. Click the Create / Register VM button and select Deploy from Deploy a virtual machine from an OVF or OVA file.
Give your Virtual Machine a name and select the .ova file. Then, you can click Next on all steps and click Finish. If wanted, you can make adjustments to these previous steps.
It can take a few minutes before the .ova file is uploaded and imported. Your Virtual Machine/Appliance will now start.
Hyper-V 2016+ (.vhdx file)
Create a new Virtual Machine and give it a name. Choose Generation 1 and assign the amount of memory as listed above in the Requirements section. Select the option Use an existing virtual hard disk and select the .vhdx file you've uploaded to your hypervisor.
Proxmox (.ova file)
Proxmox requires technical knowledge to deploy the appliance.
Download the .ova file to your computer.
Upload the ova file to a storage media in Proxmox using the web interface, or use rsync to transfer the file to Proxmox.
Open the Proxmox web based shell or connect with SSH. Navigate to the storage location of the .ova file.
Extract the downloaded ova using tar xvf SecurityHiveDevice.ova
Create a new VM using qm importovf <unused vmid> <path to ovf> <destination storage pool name> [OPTIONS]
โExample: qm importovf 401 ./SecurityHiveDevice.ovf local-lvmWhen the import has completed, browse to the VM in the Proxmox web interface. Go to the Options tab, and enable the following options:
Start at boot: Yes
QEMU Guest Agent: Enabled
If necessary, change the number of processors and amount of RAM at the Hardware tab.
Add a Network Device at the hardware tab. Select VirtIO as Model. Make sure the Firewall toggle is disabled.
Start the virtual machine
Other
Couldn't you find your hypervisor listed above? Please let us know so we can add instructions for your hypervisor and help you with the installation.
In most cases, you will have to use the .vmdk or .qcow2 file and manually create a Virtual Machine. Then, you can attach the .vmdk or .qcow2 as the disk of the Virtual Machine.
Step 3: Pair your Virtual Appliance
Good! You've managed to create your Virtual Appliance. Next, we have to pair it with your Honeypot or Vulnerability Scanner in the SecurityHive Portal. After pairing, your virtual device will download the appropriate firmware and configurations.
Go to the console of the Virtual Appliance. After booting, you will see multiple options.
Choose the option called Install device. Your Virtual Appliance will request a pairing code from the SecurityHive Portal and show you this code. This code can look something like ARFJT. Remember the code which is displayed and go to the SecurityHive Portal.
Go to your Honeypot or Vulnerability Scanner in the SecurityHive Portal. In the overview of devices, you will see a button called Pair device.
Click the Pair device and enter the pairing code shown in the console of your Virtual Appliance.
Now your Virtual Appliance will automatically continue its installation. You can close the console/connection to your hypervisor and continue in the SecurityHive Portal.
Apply a template to your Honeypot or schedule a new scan for your Vulnerability Scanner. Your device will automatically show up online and retrieve its latest configurations when the installation has finished.
Troubleshooting
Uh-oh! Are you having issues with the installation of your Virtual Appliance? We've listed some situations which occur the most. Can't find the problem you're experiencing? Just let us know, and we're happy to help.
Installation fails after pairing the Virtual Appliance
It looks like your Virtual Appliance can't connect to our servers. The Virtual Appliance must be able to set up an outgoing connection on port 443/TCP. You can test this by selecting the option Run connection test in your console and looking for the SLANE value..ova file won't import
It may be possible your hypervisor doesn't support .ova files or is not up-to-date. Update your hypervisor or create a Virtual Machine manually using the .vmdk, .vhdx, or .qcow2 file as disk.Virtual Appliance can't connect on boot
The Virtual Appliance tries to receive a DHCP lease by default. However, if your network doesn't have a DHCP server active or if you need to change the VLAN of your Virtual Appliance, it's possible to configure this manually.
โ
The Virtual Appliance will ask you to change the network settings. If this screen doesn't pop up, you can select Change network settings.