Deploy a Trellix SIEM device image on an Azure VM.
Run the installer script for the device you want to create.
Consult with your Trellix ESM specialist to determine the optimal size of your VM.
These instructions refer to third-party products. You might need to adapt to changes in interfaces or processes.
From the Azure Resource group page, select the device image.
Click Create VM.
Select a Resource Group.
Type a Virtual machine name.
Configure the VM Size with sufficient cores and memory to support the device.
Set the Authentication type to Password and set the logon credentials.
Note
These credentials are replaced by the Trellix default credentials when the VM is created. You don't need to remember these credentials.
For an Trellix ESM device, set Public inbound ports to Allow selected ports. For other devices, set it to None.
Under Select inbound ports, select HTTPS, HTTP, and SSH.
Click Next: Disks.
If you want to add a disk, click Create and attach a new disk. A Trellix Support specialist can tell you which devices support additional disks.
Set the disk Size appropriate for your device, and click OK.
Click the remaining tabs and configure the VM.
Tip
Tags help you keep track of your VMS. For example, you can add tags for owner, environment, or date created.
On the Review + Create tab, review the information and click Create.
The virtual server is created and a confirmation is shown. This can take a few minutes. It will be listed in the Virtual machines
Select the new VM and copy the IP address.
For an Trellix ESM, paste the IP address into a web browser and log on with theTrellix default credentials.
For devices other than Trellix ESM, log on to the Trellix ESM and key the device.
Note
Disabling the DHCP setting on an Azure VM deployment is not supported. Request a static DHCP address, if a permanent IP address is needed.
(Optional) Disable or delete the temporary Linux VM you used to run the installation script.