Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Setup and configuration > Installing the appliance on a virtual machine
Installing the appliance on a virtual machine
Deploying an I Series Appliance | Forcepoint Web Security Cloud
Download the OVA file suitable for your deployment from your website account to a local directory. There are 2 ways to install appliance on a virtual machine:
*
With a Silicom bypass card connected to the ESXi host, and with one management NIC. For this scenario, use the OVA file starting Websense-i500v-dio-bp-InstallImage.
*
Without a Silicom card, just using 3 virtual switches. In this scenario, use the OVA file starting Websense-i500v-InstallImage.
Ensure the installation machine meets the following requirements:
*
For a Silicom bypass card deployment, the card should be installed on ESXi in VMDirectPath mode. For more information on Silicom card installation, see Silicom card setup.
*
6 dedicated CPU cores and at least 12 GB RAM
*
128 GB hard disk drive
*
The appliance virtual machine can be installed only on VMware vSphere ESXi 5.1, 5.5, or 6.0.
This section describes how to set up the ESXi machine, and how to install the OVA file.
*
Network settings
*
Silicom card setup
*
Setting up promiscuous mode (no Silicom card)
*
Importing the OVA
*
Deployment without Silicom card
*
Deployment with Silicom card
Network settings
It is recommended that you have dedicated NICs for each of the 3 switches required for the appliance. The B1 WAN and B2 LAN switches must use different physical interfaces.
 
* 
Important 
Do not use the ESXi management physical interface for the B1 or B2 switch.
To create the required network interfaces:
1.
In the VMware vSphere Client, select Hosts and Clusters.
2.
Select your host and click the Configuration tab.
3.
Select Networking in the Hardware section, and click Add Networking.
4.
Select a connection type and click Next.
5.
Select Create a vSphere standard switch.
6.
Select the check boxes for the network adapters that your standard switch will use and click Next.
7.
Under Port Group Properties, enter a network label for the management NIC: C1 Management.
8.
Click Next.
9.
Review your settings and click Finish.
10.
Repeat these steps for 2 more switches: B1 WAN (for outgoing traffic) and B2 LAN (for incoming traffic).
Silicom card setup
To set up the Silicom bypass card on the ESXi machine, VMDirectPath technology is required. To use VMDirectPath, verify that the host has Intel® Virtualization Technology for Directed I/O (VT-d) or AMD I/O Virtualization Technology (IOMMU) enabled in the BIOS.
1.
In the vSphere Client, go to the Configuration tab and select Advanced Settings in the Hardware section.
2.
Click the Edit link.
3.
Mark the Silicom card check box. You can identify the Silicom card by checking the device details for the Silicom Subvendor ID, which should be 1374.
4.
Click OK.
The message "Changes made to some of the devices below will not take effect until the host is restarted" appears on the Advanced Settings screen.
5.
Restart the ESXi host server.
After the restart, the list of Silicom Card NICs should appear on the Advanced Settings screen with green bullets.
Setting up promiscuous mode (no Silicom card)
If you are installing without a Silicom card, you must set the B1 and B2 NICs to be in promiscuous mode:
1.
In the vSphere Client, go to the Configuration tab and select Networking in the Hardware section.
2.
Click the Properties link for the B1 switch.
3.
Select the B1 NIC in the list, then click Edit.
4.
On the Security tab, mark Promiscuous Mode, and select Accept from the drop-down list.
Click OK.
5.
The B1 NIC properties should now look like this:
Click Close.
6.
Repeat steps 2-5 for the B2 NIC.
Importing the OVA
1.
In the vSphere Client, go to File > Deploy OVF Template.
2.
Browse to the OVA file that you downloaded from your Forcepoint website account, then click Next twice.
3.
Enter a name for the I Series appliance VM, then click Next twice.
4.
If you set up the network configuration on the ESXi host as described in Network settings, you should see the following screen:
For a VM with Silicom card:
For a VM without Silicom card:
5.
Click Next.
6.
Click Finish, and wait for the installation to complete.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Setup and configuration > Installing the appliance on a virtual machine
Copyright 2022 Forcepoint. All rights reserved.