{"id":217,"date":"2024-03-28T14:31:45","date_gmt":"2024-03-28T14:31:45","guid":{"rendered":"http:\/\/192.168.2.202:82\/?p=217"},"modified":"2024-03-28T22:12:33","modified_gmt":"2024-03-28T21:12:33","slug":"deploy-revealx-in-vmware","status":"publish","type":"post","link":"http:\/\/192.168.2.203\/deploy-revealx-in-vmware\/","title":{"rendered":"Deploy Reveal(x) in VMware"},"content":{"rendered":"\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<p>If you want to learn more about the powerful capabilities of Reveal(x) then testing it out in a lab environment is a perfect way to get a better understanding. To do so you will need the following things:<\/p>\n\n\n\n<ul>\n<li>A VMware environment (ExtraHop also has physical appliances, but we will go for the virtual setup)<\/li>\n\n\n\n<li>Reveal(x) licenses (contact your local ExtraHop account team for this)<\/li>\n\n\n\n<li>OVA files which you can get from <a href=\"https:\/\/customer.extrahop.com\/s\/login\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/customer.extrahop.com\/s\/login<\/a><a href=\"https:\/\/customer.extrahop.com\/s\/login\/\">\/<\/a><\/li>\n<\/ul>\n\n\n\n<p>The setup will comprise of three virtual appliances, which all provide their own functionalities.<\/p>\n\n\n\n<ul>\n<li>Packet Sensor (EDA): Used to ingest the packet data and responsible for generating metrics and records<\/li>\n\n\n\n<li>Recordstore (EXA): Used to store the records which are generated by the EDA<\/li>\n\n\n\n<li>Packetstore (ETA): Used to ingest packet data and responsible for storing the raw packets<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading\">Deploying\/configuring the Packet Sensor (EDA)<\/h2>\n\n\n\n<p>The process of deploying a Packet Sensor can be found on the ExtraHop website. The specific virtual packet sensor in this deployment is the 1100v and the link to this deployment can be found here:<\/p>\n\n\n\n<p><a href=\"https:\/\/docs.extrahop.com\/current\/dep-eda-vmw\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/docs.extrahop.com\/current\/dep-eda-vm<\/a><a href=\"https:\/\/docs.extrahop.com\/current\/dep-eda-vmw\/\">w\/<\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>The following video shows the deployment and configuration of a packet sensor in VMware.<\/p>\n<\/div>\n\n\n\n<figure class=\"wp-block-video\"><video controls src=\"http:\/\/192.168.2.203\/wp-content\/uploads\/2024\/03\/DeployEDAYoutube.mp4\"><\/video><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<div class=\"wp-block-group has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading\">Deploying\/configuring the Recordstore (EXA)<\/h2>\n\n\n\n<p>The process of deploying a virtual Recordstore can be found on the ExtraHop website:<\/p>\n\n\n\n<p><a href=\"https:\/\/docs.extrahop.com\/current\/deploy-exa-vmware\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/docs.extrahop.com\/current\/deploy-exa-vmware\/<\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>The following video shows the deployment and configuration of a Recordstore in VMware.<\/p>\n<\/div>\n<\/div>\n\n\n\n<figure class=\"wp-block-video\"><video controls src=\"http:\/\/192.168.2.203\/wp-content\/uploads\/2024\/03\/DeployEXAYoutube.mp4\"><\/video><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Deploying\/configuring the Packetstore (ETA)<\/h2>\n\n\n\n<p>The process of deploying a virtual Packetstore can be found on the ExtraHop website:<\/p>\n\n\n\n<p><a href=\"https:\/\/docs.extrahop.com\/current\/deploy-eta-vmware\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/docs.extrahop.com\/current\/deploy-eta-vmware\/<\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>The following video shows the deployment and configuration of a Packetstore in VMware.<\/p>\n\n\n\n<figure class=\"wp-block-video\"><video controls src=\"http:\/\/192.168.2.203\/wp-content\/uploads\/2024\/03\/DeployETAYoutube.mp4\"><\/video><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"connecting-edaexaeta-together\">Connecting EDA+EXA+ETA together<\/h2>\n\n\n\n<p>Now that all the appliances are deployed the last step to take it to connect them all together so that they will work as one system. If you have a ExtraHop Command Appliance (ECA) then go to the following post:<\/p>\n\n\n\n<p><a href=\"https:\/\/xtrhop.com\/connecting-evrything-together-with-a-eca\/\" data-type=\"link\" data-id=\"https:\/\/xtrhop.com\/connecting-eca-with-eda-exa-and-eta\/\">https:\/\/xtrhop.com\/connecting-evrything-together-with-a-eca\/<\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>If you don&#8217;t use a ECA then continue with the rest of this port. Keep in mind that the users will only have to login to the GUI of the Packet Sensor (EDA) to be able to access all the data that is stored on the three appliances.<\/p>\n\n\n\n<p>The following video shows how to connect all the appliances together.<\/p>\n\n\n\n<figure class=\"wp-block-video\"><video controls src=\"http:\/\/192.168.2.203\/wp-content\/uploads\/2024\/03\/ConnectingEDAEXAETAYoutube.mp4\"><\/video><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<h1 class=\"wp-block-heading\" id=\"summary\">Summary<\/h1>\n\n\n\n<p>This blog should hold all the data to get you up and running for your lab environment. Please always try to use a live data feed to get the most value out of the lab environment as it will provide you with really interesting data and detections. If you are looking for any other ExtraHop deployment then please go to:<\/p>\n\n\n\n<p><a href=\"https:\/\/docs.extrahop.com\/current\/deploy\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/docs.extrahop.com\/current\/deploy\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>If you want to learn more about the powerful capabilities of Reveal(x) then testing it out in a lab environment is a perfect way to get a better understanding. To do so you will need the following things: The setup will comprise of three virtual appliances, which all provide their own functionalities. Deploying\/configuring the Packet [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":209,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"_links":{"self":[{"href":"http:\/\/192.168.2.203\/wp-json\/wp\/v2\/posts\/217"}],"collection":[{"href":"http:\/\/192.168.2.203\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/192.168.2.203\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/192.168.2.203\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/192.168.2.203\/wp-json\/wp\/v2\/comments?post=217"}],"version-history":[{"count":6,"href":"http:\/\/192.168.2.203\/wp-json\/wp\/v2\/posts\/217\/revisions"}],"predecessor-version":[{"id":240,"href":"http:\/\/192.168.2.203\/wp-json\/wp\/v2\/posts\/217\/revisions\/240"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/192.168.2.203\/wp-json\/wp\/v2\/media\/209"}],"wp:attachment":[{"href":"http:\/\/192.168.2.203\/wp-json\/wp\/v2\/media?parent=217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/192.168.2.203\/wp-json\/wp\/v2\/categories?post=217"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/192.168.2.203\/wp-json\/wp\/v2\/tags?post=217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}