KVM vSensor

This guide is intended to help customers or partners deploy vSensors in KVM environments and pair them to your Vectra Brain. This includes both Respond UX and Quadrant UX deployments.

Introduction

This guide is intended to help customers or partners deploy vSensors in KVM environments and pair them to your Vectra Brain. It will cover basic background information, connectivity requirements (firewall rules that may be needed in your environment), deployment of the vSensor in KVM, and pairing.

vSensors behave much in the same way that physical Sensors do. One advantage is that there is no cost to deploy a vSensor other than your own costs to provide and maintain the infrastructure they run in. vSensors also allow you to capture and analyze traffic that only exists in the virtual environment. You can even use vSensors in place of physical Sensors to capture physical network traffic.

KVM vSensors can be used in both Respond UX and Quadrant UX deployments. For more detail on Respond UX vs Quadrant UX please see Vectra Analyst User Experiences (Respond vs Quadrant). One of the below guides should be the starting point for your overall Vectra deployment:

• Vectra Respond UX Deployment Guide

• Vectra Quadrant UX Deployment Guide

Either of the above guides cover basic firewall rules needed for the overall deployment and initial platform settings. Virtual Sensor (VMware, Hyper-V, KVM, AWS, Amazon, and GCP) configuration and pairing and covered in their respective guides. Physical appliance pairing is covered in the Vectra Physical Appliance Pairing Guide. Please see the Vectra Product Documentation Index on the Vectra support site for additional documentation including deployment guides for CDR for M365 / Azure AD and CDR for AWS.

Contains

• Introduction

• About KVM vSensor Images

• KVM vSensor Requirements and Throughput

• Connectivity Requirements

• Preparing to Deploy KVM vSensors

• KVM Requirements, Networking, and Interaction

  • Requirements

  • Networking

    • Jumbo Frame Support

  • Basic Interactions with KVM Virtual Machines

• Downloading the KVM vSensor Image

• KVM vSensor Deployment

• Initial vSensor Configuration at the CLI

• Pairing KVM vSensors

• Additional Pairing Guidance

• Traffic Validation

• Worldwide Support Contact Information

Attachments

679KB

KVM vSensor Deployment Guide - 2025_Aug_27.pdf

PDF

Open