Guides
Secure Access Help Center

Deploy VAs in VMware

Deploy Cisco Secure Access Virtual Appliances (VAs) in VMware.

Note: You must deploy at least two Virtual Appliances (VAs) in a Secure Access Site. It is critical that these VAs are not cloned or copied in any way. Configure and set up each VA manually.

Table of Contents

Prerequisites

  • Full Admin user role. For more information, see Manage Accounts.
  • For information about the network requirements for deploying VAs, see Prerequisites for Virtual Appliances.
  • Basic knowledge of VMware ESXi. For more information, see the VMware documentation.

(Optional) Configure Authentication for the Virtual Appliances

Before you can download the Virtual Appliance image in Secure Access, you must configure your Secure Access API keys for the Virtual Appliances in your organization. For more information, see Configure Authentication for Virtual Appliances.

Procedure

Step 1 – Download OVF Template

a. Navigate to Connect > DNS Forwarders and click Download Components.

b. Click Download for VA VMWare ESXi.

Umbrella generates and downloads a .tar file unique to your deployment.
This tar file includes: 

  • an .ovf template containing the virtual hard disks that need to be deployed on VMware 
  • a signature file 
  • a Cisco public certificate to validate the signature 
  • a readme file 

c. Extract the contents of the tar file using the command tar –xvf <.
To verify the integrity of the downloaded file, validate the signature by following the instructions provided in the readme file. On successful signature validation, you should see a message saying “Verified OK." 

Step 2 – Deploy OVF Template

a. Log into your VMware vSphere client and select the File tab.

b. Click Deploy OVF Template, choosing the downloaded .ova template.

366

c. Follow the deployment wizard prompts, but be sure to follow these steps:

  • For the source, browse to the .ova file you just downloaded.
  • Specify a unique name and location for your VA.
572

d. Select the disks appropriate to your environment. It is recommended to select Thin Provision for the disk format, but it is not mandatory.

504

e. Select or map a network.

600

f. Click Finish.
The system begins to deploy the VA. During the deployment, subsequent prompts update you about the status of the deployment.

Step 3 – Deploy a Second Virtual Appliance

While the first VA is deploying, repeat the previous two steps to configure your second VA.
Note: Two VAs are required per Umbrella site. It is critical that these VAs are not cloned or copied in any way. Each VA must be set up and configured manually.

628

Step 4 – Power on the Virtual Machines

If the deployment succeeded, you'll see the VA console screen. For information about configuring VAs, see Configure Virtual Appliances.

Deploy VAs in Hyper-V for Windows 2012 or Higher < Deploy VAs in VMware > Deploy VAs in Microsoft Azure

Updated 3 months ago