Faddom

If you have standalone ESXI hosts or prefer to manually deploy sensors, you can follow the below procedure to do this.

Deploy via URL using https://&lt;faddom-server&gt;/Installations/Sensors/Template/Faddom-Sensor-Appliance-2024.4.9.ovf. Alternatively, you can download the OVF and VMDK files from the Faddom server. Linux - <code>/usr/local/tomcat9/webapps/ROOT/Installations/Sensors/Template</code>

Windows - <code>&lt;installationdirectory&gt;\Faddom\Tomcat\webapps\ROOT\Installations\Sensors\Template</code>

Go to Configure -&gt; Networking -&gt; Virtual switches.

Select Virtual Machine Port Group for the Standard Switch

Confirm the target device, i.e. the Faddom sensor

Give the port group a name (we recommend <code>faddom-sensor-[HOSTNAME]</code> and select All for the VLAN ID.

Click Edit on the port group and go to Security

For Promiscuous Mode, select Override then Accept

Using the VM's Edit Settings, add a network adapter to the sensor for each switch you configured and assign it to the port group you created.

Start the Sensor appliance and log in using the username faddom and the password set during the deployment and run <code>if config</code> to confirm the IP address

1. If needed, run <code>sudo ~/configip.sh </code>to define a fixed IP address for the VM and configure the newly added network adapters.

Open the Faddom Server UI, and under Settings &gt; Sensors, add the sensor that you just configured. See <a href="https://Configuring%20A%20Manually%20Deployed%20Sensor" rel="nofollow noopener noreferrer" target="_blank">Configuring A Manually Deployed Sensor </a>for further details

Repeat for any additional ESX servers you wish to get traffic for

1. Deploy via URL using https://&lt;faddom-server&gt;/Installations/Sensors/Template/Faddom-Sensor-Appliance-2024.4.9.ovf. Alternatively, you can download the OVF and VMDK files from the Faddom server. Linux - <code>/usr/local/tomcat9/webapps/ROOT/Installations/Sensors/Template</code>
 Windows - <code>&lt;installationdirectory&gt;\Faddom\Tomcat\webapps\ROOT\Installations\Sensors\Template</code>
2. Go to Configure -&gt; Networking -&gt; Virtual switches.
3. Click on Add Networking
4. Select Virtual Machine Port Group for the Standard Switch
5. Confirm the target device, i.e. the Faddom sensor
6. Give the port group a name (we recommend <code>faddom-sensor-[HOSTNAME]</code> and select All for the VLAN ID.
7. Finish creating the port group
8. Click Edit on the port group and go to Security
9. For Promiscuous Mode, select Override then Accept
10. Using the VM's Edit Settings, add a network adapter to the sensor for each switch you configured and assign it to the port group you created.
11. Start the Sensor appliance and log in using the username faddom and the password set during the deployment and run <code>if config</code> to confirm the IP address
 1. If needed, run <code>sudo ~/configip.sh </code>to define a fixed IP address for the VM and configure the newly added network adapters.
12. Open the Faddom Server UI, and under Settings &gt; Sensors, add the sensor that you just configured. See <a href="https://Configuring%20A%20Manually%20Deployed%20Sensor" rel="nofollow noopener noreferrer" target="_blank">Configuring A Manually Deployed Sensor </a>for further details
13. Repeat for any additional ESX servers you wish to get traffic for