This section assumes the following for deploying the Virtual Sensor for scenario 2.
The ESX server meets the requirements as discussed in Requirements for deploying the Virtual Sensor.
You have the privileges on the ESX server to add and modify vSwitches and port groups.
You have installed the Virtual Sensor and established trust with the Manager successfully. As an example in this scenario, the management port is connected to vSwitch2.
As an example, this section uses the IPS-VM5000 Virtual Sensor to explain the deployment.
This scenario involves only a Sensor monitoring port pair deployed in inline fail-closed mode.
This section uses only the vSphere Client for configurations on the ESX.
Steps:
Create vSwitch1 for connecting Sensor monitoring port 2 and the 10.10.10.16 server.
Modify vSwitch0 to connect monitoring port 1.
Refer to Modify an existing standard vSwitch for a monitoring port.
Assign the corresponding switch port group (promiscuous mode) that you created in step 1 to monitoring port 2.
Change the switch port group for the 10.10.10.16 server such that it is now connected to vSwitch1.
Assign the corresponding switch port group (promiscuous mode) that you created in step 2 to monitoring port 1.
Verify if you have deployed the Virtual Sensor correctly and whether it is inspecting traffic.
Refer to Verify the deployment.