Introduction and requirements

Overview of the GCP Brain deployment and prerequisites, including required access, tooling, and Vectra-provided resources.

Introduction

This document outlines the steps to deploy a Vectra NDR virtual Brain in a customer’s Google Cloud Platform (GCP) project. The Brain is deployed using the gcloud command line tool with a template provided by Vectra. The template references a Brain image that is shared by Vectra with the Compute Image User referenced by the project number. The GCP Brain supports up to 85 Gbps network traffic captured by paired Sensors. GCP Sensor deployment and pairing is covered in the GCP vSensor Deployment Guide.

The GCP Brain can be used in both Respond UX (RUX) and Quadrant UX (QUX) deployments. For more detail on Respond UX vs Quadrant UX please see analyst UX options (Respond vs Quadrant). One of the below guides should be the starting point for your overall Vectra deployment:

• Respond UX deployment

• Quadrant UX deployment

Either of the above guides cover the overall deployment and initial platform settings. Virtual Sensor (VMware, Hyper-V, KVM, Nutanix, AWS, Amazon, and GCP) deployment is covered in NDR virtual / cloud appliances. Physical appliance deployment is covered in NDR physical appliances. Pairing of all appliance types is covered in pairing appliances. Please see other guides in the deployment section for guidance for other appliances and products you may want to include in your overall deployment.

General Requirements

• User with sufficient permissions in GCP who is available to deploy using the Vectra provided template.

  • User will need to be able to create a project or have access to a project they can use.

  • User will need to be able to create VPCs, subnets, firewall rules, and VMs or use existing ones.

• Access to gcloud command line tool either via GCP SDK or cloud shell.

• Vectra will provide the following information in a welcome email after receiving the GCP project number:

  • Image path for Brain - This will be entered in the deployment template and references the current GCP Brain image shared by Vectra.

  • Deployment Template - Link to download the deployment template.

  • Provisioning Token – Allows the Brain to register with Vectra.

    • Please note that provisioning tokens expire after 14 days. Vectra can provide a new one if you don’t have a chance to deploy before the initial one expires.

• The Preparation section below contains additional requirements that must be sufficed to ensure successful deployment of the Brain image in GCP.