Log in

Sangfor Support Center

Table of Contents
< All Topics
Print

【Cyber Command】VMware Virtual Cyber Command (vCC) Deployment Guide_V3.0.92

Posted
Updated
Byhuijun.chan@sangfor.com
Views31

Introduction

This document is the vCC (virtual Cyber Command) installation guide, suitable for all ISO versions.

Deployment

Customer-Related Deployment Preparations

Resources Required for Deployment

You need to access the customer’s VMware cloud environment and be familiar with the customer’s network configuration.

Uploading the image to the cloud platform may take 50 minutes, and the entire deployment may take 1.5 hours.

The deployment environment should have enough resources and space (at least 8C32G+128G+4T).

Deployment Preparations

The ISO image can only be deployed in a VMware virtual environment and not with physical hardware.

Deployment of the English version is only compatible with VMware ESXi 5.0/VMware ESXi 6.0/VMware ESXi 7.0.

The following CPU models are measured (including but not limited to):
48 CPUs x Intel(R) Xeon(R) Gold 5220R CPU @ 2.20GHz
28 CPUs x Intel(R) Xeon(R) CPU E5-2680 v4 @ 2.40GHz
44 CPUs x Intel(R) Xeon(R) CPU E5-2699 v4 @ 2.20GHz
20 CPUs x Intel(R) Xeon(R) Silver 4210 CPU @ 2.20GHz

The English version can only support the following configuration:

Scenario Supported Memory Configuration CPU Configuration Disk Configuration NICs Configuration
Virtual Environment Deployment
VMware ESXi 5.0.0/6.0.0/7.0.0		 Yes 32G 8 cores System: 128G
Data: 4T		 4
Virtual Environment Deployment
VMware ESXi 5.0.0/6.0.0/7.0.0		 Yes 96G 32 cores System: 128G
Data: 4T		 4
Virtual Environment Deployment
VMware ESXi 5.0.0/6.0.0/7.0.0		 Yes 128G 40 cores System: 128G
Data: 4T		 4
Virtual Environment Deployment
VMware ESXi 5.0.0/6.0.0/7.0.0		 Yes 256G 40 cores System: 128G
Data: 4T		 4
Physical Hardware Deployment No

Table1: Virtual Environment Spec Description

Deployment Process

Prepare the ISO image of Cyber Command.

Import the image, configure the environment, and start the auto installation. This may take 1.5 hours.

Business Verification After Deployment

Check whether you can log in normally without any error prompts.

If STA is connected, go to the Logs page to check whether new logs are generated constantly.

Check as required whether customer business is operating as usual.

Rollback

None.

Deployment Instruction

Preparations Before Deployment

Deployment Tools

Prepare the ISO image of Cyber Command.

Deployment Environment

None.

Customer Resources

Refer to Chapter 2.1 Customer-Related Deployment Preparations.

Deployment Procedures

Deployment Procedures

Cyber Command Deployment:

  1. Get the ISO image of Cyber Command and import it to the customer’s VMware cloud environment.
  2. Configure the virtual machine. Select the ISO image of Cyber Command for the virtual CD/DVD drive.
  3. Power on the virtual machine and select automatic installation.
  4. Wait for the system to install automatically.

VMware ESXi Deployment:

  1. On the ESXi Host Client, navigate to Storage > database 1 > Datastore browser. Click Upload to upload the obtained image to VMware, which may take about 50 minutes.

  1. Click Create / Register VM to create a new virtual machine.

  1. On the Select creation type page, select Create a new virtual machine. Click Next to proceed.

  1. On the Select a name and guest OS page, select ESXi 7.0 virtual machine for Compatibility (you can also select ESXi 5.0 virtual machine or ESXi 6.0 virtual machine). Next, select Linux for the Guest OS family and CentOS 7 (64-bit) for the Guest OS version, as shown in the figure below.

  1. On the Select storage page, ensure that the environment has enough space. Then click Next.

  1. On the Customize settings page, configure the virtual machine as follows:
    8-core CPU, 32GB Memory, 128 GB system disk, and 1 TB data disk(depending on the storage, suggest making it larger in the first deployment). Virtual CC supports 1 to 4 NICs.

  1. Select an image to be added to the virtual CD/DVD drive.

  1. Select the Connect at power on checkbox.

  1. On the Ready to complete page, review your settings and click Finish.

  1. Select the newly created virtual machine and click the Power on button.

  1. You will go to the installation page. Press Enter to select the automatic installation (the installation version may refer to the ISO version).

  1. Wait for the automatic installation to complete, which may take 1.5 hours.

  1. After the automatic installation is complete, click Reboot.



You may also press ALT + F5 to enter the VMware console page to configure the custom IP address.
The default admin password is admin.

On the Custom Setup screen, select Setup Network Interface and OK, then press Enter.

On the NetInterface screen, select eth0 and OK. Press Enter.

On the Setup Network IP localIP screen, set the IP according to the following format:
NetworkIP/segment Space reservedIP/segment

For example:
192.168.1.123/24 10.251.251.252/24
After specifying the IP, select OK and press Enter.

On the NetInterface localIp screen, press 1 to continue the static route setup.


  1. After installation, you are required to find a PC with the same IP segment as the vCC 10.251.251.252 to continue the setup. Also, if you change the IP via the console page, you need to change the PC’s network segment accordingly to access the web console page.

  2. The default login account username of the web console is admin with the password admin.

Licensing is required to use the product. Otherwise, you can only access the page about system settings.

After entering the web console, you need to add the static route and IP address manually. Otherwise, the newly configured IP address information will be invalid after the device restarts.


Note:
Virtualization deployment requires a basic configuration. For example, if CPU cores, memory size, system disk, and data disk size are non-standard, the system may fail to start, or the gateway may be unreachable.

Connection with STA

When Cyber Command is licensed, it needs to be connected with a Stealth Threat Analytics (STA) device to receive traffic. The following operations should be performed on STA:

  1. Log in to STA.

  1. Ensure that the customer’s traffic is connected and will be forwarded from the switch’s mirror port. It also depends on the customer’s network configuration.

  1. On the STA console, navigate to System > Cyber Command. Specify a Cyber Command IP address to be connected and test connectivity.

  2. Choose the log transmission mode, which is usually set to the Advanced logs mode. Then, click OK to save the settings.

  1. Check the STA status on Cyber Command and ensure that STA is connected.

The following figure shows that Cyber Command has processed traffic normally.

VMware vSphere Client Deployment

  1. Upload ISO file to VMware datastore.

  1. The upload may take 30 minutes. The ISO file in the following figure is just an example.

  1. Click Create a new virtual machine.

  1. After entering the Create New Virtual Machine dialog box, select Typical to create a new virtual machine and click Next.

  1. Select a host and click Next.

  1. Select a resource pool and click Next.

  1. Select the appropriate storage size and ensure it aligns with the specifications listed in the Virtual Environment Spec Description.

  1. Select Linux OS and CentOS 4/5/6/7 (64-bit) version for the virtual machine. Then click Next.

  1. This virtual CC supports 1 to 4 NICs. The supported NIC types include VMXNET3, VMXNET2 (enhanced), and e1000.

  1. Add a 128 GB system disk and select Thick Provision Lazy Zeroed. Then click Next.

  1. Click Continue to complete the specific configurations for the virtual machine.

  1. Change CPU to 8 cores and change memory size to 32GB.

  1. Add a 4TB data disk, ensuring that the environment has sufficient resources.

  1. Select Create a new virtual disk. Then click Next.

  1. Specify the virtual disk size and click Next.

  1. Click Next.

  1. Click Finish to complete the settings to add a disk.

  1. Select an image to be added to the virtual CD/DVD drive. Check the Connect at power on checkbox. Then, click Browse to upload the selected ISO Image.

  1. After adding the file, click Finish and wait for VMware to create a new virtual machine.

  1. Select the newly created virtual machine and click Power on to enter the automatic installation page. The operation steps are the same as VMware ESXi and will not be repeated here.