Before you begin
- Only permit out-of-order flows can be inspected by the Virtual IPS Sensor for auto scaling groups. To use the auto scaling feature, do not change the settings for TCP Flow Violation in the IPS Manager under Devices → <Admin Domain Name> → Devices → <Device Name> → Setup → Advanced → Protocol Settings.
- Manager has to be installed with the required settings.
- Configure the Controller in Manager.
- Install the vIPS Probe in the virtual machine to be protected.
- Create a launch configuration for the auto scaling group along with user data that defines the Manager IP address and the Cluster name.
- AWS CloudWatch services should be enabled to create new alarms that triggers launching of new instances.
To create an auto scaling group for Sensors without an AWS elastic load balancer, follow the steps below:
Task
- Create a Cluster in the Manager. See the section Create a Cluster.
-
Create a launch configuration for auto scaling groups in AWS with the following recommended settings:
- Virtual IPS Sensor AMI that has the Manager shared secret key enabled
- User data containing Manager IP address and the Cluster name. It is recommended to use the same Cluster name defined in the Manager. To establish the trust with Manager, see the section Custom/User data for establishing trust.
- Create an auto scaling group in AWS. Create alarms that contain the thresholds for increasing or decreasing the number of instances.
- Create scheduled actions for launching the Virtual IPS Sensor instances one after the other.
- Define CloudWatch events in the CloudWatch console.