Views:

Deploy your Virtual Network Sensor to your Azure cloud environment.

If your security environment uses a hybrid deployment, or you do not have VMware or Microsoft Hyper-V in your environment, you can leverage your Azure subscription to deploy a Virtual Network Sensor.
Azure_VNS=GUID-f1efebe3-32e2-4832-bda5-01bf4000239b.jpg
Example mapping of a Virtual Network Sensor deployment within the Azure environment
Before you begin, review the Virtual Network Sensor system requirements and ensure you have a sign in with permission to deploy virtual machines on the target subscription.
To deploy the Virtual Network Sensor, you must complete the following steps:
  1. Choose or create a virtual network for the Virtual Network Sensor instance.
    For more information on how to create a virtual network, refer to the Azure documentation.
  2. Choose or create the network security group and subnets for the Virtual Network Sensor data port and management port.
    Trend Micro recommends using different subnets for the data and management ports.
  3. Launch an instance with the Virtual Network Sensor.
  4. Verify the Virtual Network Sensor can connect with Network Inventory.
    If the Virtual Network Sensor does not appear in Network Inventory after deployment, verify the following settings:
    • Network settings (NIC/vNIC setting and order)
    • Firewall settings
    • Proxy settings if using a proxy
    • Review the Virtual Network Sensor FAQ to verify and test the connection
  5. Configure the network settings for the Virtual Network Sensor.
    Azure currently does not provide a function for traffic mirroring. You can use any third-party Network Packet Broker by following the setup instructions for your preferred solution. Trend Micro has tested Gigamon VUE Cloud Suite for Azure with the Virtual Network Sensor. For full deployment instructions, refer to the Gigamon documentation.
    Before deploying Gigamon, be sure to also review Tips for setting up traffic mirroring with Gigamon VUE Cloud Suite for Azure.
    After configuring your network settings, access the Virtual Network Sensor console and use the command show traffic to verify the Virtual Network Sensor is receiving traffic. For more information about troubleshooting, see Virtual Network Sensor FAQ and Virtual Network Sensor CLI commands.
Related information