Deploy the ExtraHop Discover Appliance in Azure
The following procedures explain how to deploy an ExtraHop Discover virtual appliance in a Microsoft Azure environment. You must have experience administering in an Azure environment to complete these procedures.
System requirements
Your environment must meet the following requirements to deploy a virtual Discover appliance in Azure:
- An Azure storage account
- A Linux, Mac, or Windows client with the latest version of Azure CLI installed.
- The ExtraHop Discover appliance virtual hard disk (VHD) file, available on the ExtraHop Customer Portal
- A Discover appliance product key
- An Azure instance size that most closely matches the Discover appliance VM size, as
follows:
Appliance Azure Instance Size EDA 1000v Basic_A3 or Standard_DS2 EDA 1100v - Reveal(x) Standard_A4_v2 EDA 2000v Basic_A4 or Standard_DS4 EDA 6100v Standard_D16_v3
Important: | If you want to deploy more than one ExtraHop virtual appliance, create the new instance with the original deployment package or clone an existing instance that has never been started. |
Deploy the Discover appliance
Before you begin
The procedures below assume that you do not have the required resource group, storage account, storage container, and network security group configured. If you already have these parameters configured, you can proceed to step 6 after you log into your Azure account.Next steps
- Open a web browser and navigate to the ExtraHop Web UI through the configured management IP address. Accept the license agreement and then log in. The default login name is setup and the password is default. Enter the product key to license the appliance.
- Configure an Azure virtual network TAP for the EDA 6100v.
- After the appliance is licensed, and you have verified that traffic is detected, complete the recommended procedures in the post-deployment checklist.
Configure an Azure virtual network TAP for the EDA 6100v
To optimize performance, we recommend that you forward your virtual machine traffic through an Azure virtual network TAP (vTAP). Connect the vTAP to the virtual machines that you want to monitor and then forward that traffic through the vTAP to your EDA 6100v.
For more information about configuring an Azure virtual network TAP, see the
following Microsoft resource.
Configure your EDA 6100v with the following network settings.
- Log into the Admin UI on your Discover appliance.
- In the Network Settings section, click Connectivity.
- Click Interface 1.
- From the Interface Mode drop-down, select Management Port.
- Click Save.
- Click Interface 2.
- From the Interface Mode drop-down, select Management Port + RPCAP/ERSPAN/VXLAN Target.
- In the IPv4 Address field, specify the static IP address that matches the IP address of the Azure virtual tap.
- Configure any other settings that are required for your network, and then click Save.
Thank you for your feedback. Can we contact you to ask follow up questions?