Protector v mware-setup-guide-esxi-version-3.0

Thank you for choosing Protector UTM – Virtual Edition ESXi. This guide will help you through the process of downloading, installing and configuring the software.

SecPoint® Protector – Virtual Edition ESXi 5.x Installation Guide

Rev. 2.0 - January 2013 - Protector® 18.5 and newer.

ProtectorTM Unified Threat Management VPN Firewall http://www.secpoint.com/protector.html

Copyright © 1999-2014 SecPoint® Page 2 of 24

Protector ESXi Installation Guide

Please read the these instructions carefully and make sure that you are following each and every step exactly as mentioned in this guide. Otherwise you may not be able to run the software. For Troubleshooting please check the Troubleshooting Section of this Guide. During installation: 1. You’ll need the Unit ID. Please make sure you do have the unit ID/License ID. A Unit ID consists of a 10 digit alphanumeric code and looks like this example: ExAmPle123 2. You’ll need to Login to VIP Lounge. This is necessary to download the software. Please make sure you do have your login credentials for the VIP Lounge, or alternatively your unit ID. If you didn’t receive your login credentials for the VIP Lounge, you may use your unit ID,or you may contact your reseller or send an e-mail to [email protected] to get them.



Software Download Please follow the login instructions in one of the boxes below. The final result will be the same. If you have VIP Lounge Userid – Password Go to this link: https://vip.secpoint.com and type your VIP Lounge login credentials. Once you have successfully logged in, click on the button Download Software (on the right side of the screen) .

You will be

redirected to the download page, that will show the Protector’s download choice.

If you also purchased a Penetrator, you will see the download choice of

both products.

If you only have your Unit ID Go to this link: https://vip.secpoint.com/secpoint/download.php and type your Unit ID. Once you have successfully logged in, you will be redirected to the download page. This page will show the Protector’s download choice.



Click on Download Protector ESXi VMware Server version to open the download window, as shown in the picture below.

Just like a Microsoft Word document file runs on Microsoft Word, the same way the Virtual Edition of Protector runs on VMWare ESXi .

The Protector software is a large file, so you will find it packed and split into two .rar files.

The two software parts must be unpacked using Winrar. If you don’t already have it installed on your computer, you can download it from here, clicking on Download Winrar To proceed with installation, you need to do the following steps:

1. First step is to install the VMware ESXi server on your machine 2. Second step is to setup the networking part within the ESXi server so Protector Software is able to use the ESXi server network cards. 3. In this step we guide your trough the steps you need to take to upload the Protector software on your ESXi server and how to install it 4. Last Step is to activate your license within the VM so it will be ready for use



STEP 1 Install VMWare ESXi on your Computer that you have already downloaded from VMWare: First you need to install the ESXi server and setup the network cards (nics). In this example we have three network cards One Network card for the interface management purpose (192.168.10.2) One Network card for the interface INTERNET One Network card for the interface LAN After installed the software on the target machine we made some changed regarding the network cards 1) We assigned the internal network card to the management segment (vmnic2)

2) Then we assigned the correct IP address/mask to the interface

3) After this we only need to save our setting



4) Then we need to access the VMware with the vShere or VMware Infrastructure client

5) Before we upload the VM files we are going to setup the networking part first.



STEP 2 1) Now we need to set the correct network settings.

2) Go to the TAB Configuration

3) Click on Networking

4) Select add and select Virtual machine and click next



5) Select the correct NIC in our case vmnic2

6) Give the NIC the name INTERNET.



7) Select add and add another virtual machine.

8) Select the correct NIC in our case vmnic3

9) Give this NIC the name LAN



10) The final setup should like this overview

11) The last steps of this section is to edit both NIC NTERNET and LAN to change a setting. This can be done by selecting the Properties and use the Edit button to open the configuration of the NIC



12) We need to change the parameter Promiscuous mode from rejected to Accept. If this already is done you can skip this part of this section and go to step 3

13) After editing the adapter go to the TAB Security , change on both adapters INTERNET and LAN) the Promiscuous Mode to Accept and click OK.



14) Final setup would be:



STEP 3 1) In this section we are going to Deploy a OVF Template, Use the menu fileand select Deploy OVF Template.

2) Click on Browse to select the OVF file



3) Select the Folder where you stored the Vmware files

4) Click on next.



5) Enter the name and location, and click on next.

6) Select Thick Provison lazy/Eager zeroed or Thin Provision. Default we select Thick lazy

7) Next step is the correct mapping of the network card with we setup in step 2



8) This final setup should overview like this. To continue click on Finish



9) It will start upload the file this can take a while.



STEP 4 1) Now you are ready and can you start the VMware machine and access it by it default IP address on Interface INTERNET or LAN by using the url https://192.168.1.2./ or Access the Protector within the VM by using the ESXi Console.



2) Now you need to add your license into the VMware machine remote or within the VM console. You will see this login screen. If you do not get the page please goto https://127.0.0.1/login.php?query=init Or https://192.168.1.2/login.php?query=init Depending on the IP you have set.

3) Now you need to initialize your license by entering your Unit ID. You’ll be asked to confirm to perform some initialization steps using root’s (the Superuser’s) privileges. Click OK to proceed.



4) At the end of initialization, you will see the login screen above. Now you can enter your username (admin) and your ID as password ( the unit ID.)

The Protector’s login page can be reached at https://127.0.0.1/login.php from within the VMWare virtual machine.

The Protector’s default IP address is 192.168.1.2, so, once the VMWare virtual machine has started, you can login to the Protector by just pointing your browser to https://192.168.1.2/login.php from the host operating system (Windows) without going into the virtual machine. The same can be done from another computer in your LAN.

When you login to the Protector from your host OS or from another computer, you must first add your computer’s IP to the list of authorized IPs. You can do this by pointing your browser to https://192.168.1.2/adminip/ . Here you can enter the same login information as on step 8. If you mistype your Unit ID you will not be able to activate your license. You can repeat the activation process by browsing to https://127.0.0.1/login.php?query=init



Please Note: Once you first run the software, the license will be Not active until it gets online and activates. How to get online: 1. Make sure VMware is set to Bridge mode: Go to menu Virtual Machine > Virtual Machine Settings of your VMWare. Here, set the Network to Bridged mode. 2. Go to the Protector web interface and click Advanced Menu > System >IP, Gateway & DNS 3. Change the IP settings according to your Network. Click OK and wait for the Protector to restart with the new settings. 4. Click on System Status: Perfect / Not Good (on the right side , in Protector Information) and check that the DNS Online status is OK.

5. Click on on the right part of the screen to connect to the update server and activate the license. 6. If the License cannot be activated, please go to Advanced Menu > System > System Logs and click on Cleanup Firmware Lock file. Then go to Advanced Menu > Update > Force Database Update and click OK. If you still can’t update, please contact Support.

It is recommended that you keep your Protector always up-to-date, to get the maximum from new features. Please download a new firmware whenever it’s available. You can read the change log at http://www.secpoint.com/latest-protector-firmware.html

Live Chat and Remote Support If you have any issues, please visit http://www.secpoint.com and Click on the Live Chat support image on the Top Middle section.

Please note that we provide remote support using TeamViewer and we can work only via TeamViewer Version 6.Please Make sure you have teamviewer installed. You can click here to download TeamViewer



Quick Setup Wizard

You can run the Quick Setup Wizard to perform a set of setup operations at once. Click on Quick Setup Wizard on the menu bar and follow the instructions.

At the end of a Quick Setup Wizard, the Protector Information box should report a Perfect status.



Troubleshooting • If you have any problems to get your Protector to connect to the internet: Login to the Protector, then goto Advanced Menu >System> IP, Gateway & DNS. Here you can configure the IP address so that it fits your network feature. • If you get a black screen and the text EOFEOF when you startup the virtual machine: It can be because the Vmwarevirtual machine did not close correctly. To solve it: VMware player/workstation: Please click the Vmware menu and click Ctrl+Alt+del VMware Esxi: Right click on the VM – mark Guest click SendCtrl+Alt+del • VMWare Tools: If the VmWare software asks you if you want to upgrade to the latest VMware tools, please select NO and Never Remind again. The tools are already included and upgrading to a newer, untested version, may cause software issues. • Firewall: If you have a firewall blocking the outgoing traffic, please make sure to whitelist the website https://update.secpoint.com , TCP port 443. This is the server used to keep the Protector up to date. • License Expired: If the Protector says that the License is expired, just after installation, it means that you need to get online and get the latest update so you get your new license. Please goto Advanced menu > Firmware > Force Database Update and force database update.Make sure you are online, you can see it on the System Status on the right side of the page. It must be Green and say Perfect. If the update process is stuck at 96%, it means it tried to update without internet access. Please goto Advanced Menu > System > System Logs and cleanup firmware lock file, then try again. If you need any help please email us at [email protected] or visit http://www.secpoint.com and click the live chat image on top.



Training Videos

Complete Installation Video : http://www.youtube.com/watch?v=8xqZgC6NOlY

How To Update Firmware: http://www.youtube.com/watch?v=6jE07NQn0l4

Quick Install Wizard: http://www.youtube.com/watch?v=PtTIc8ZXqFM

Pop3 Configuration: http://www.youtube.com/watch?v=Fm8GFIRS4hg

Protector VMWare Install : http://www.youtube.com/watch?v=QCKpcRbEMIg

Protector Welcome Screen : http://www.youtube.com/watch?v=kYJ8NWaKLOM

Protector 18.5 release video: http://www.youtube.com/watch?v=lfMBTKG5w7Q

Date post:	31-Aug-2014
Category:	Technology
Upload:	secpoint-aps
View:	194 times
Download:	0 times

Protector v mware-setup-guide-esxi-version-3.0

Technology