1. Sign in to the Arctic Wolf Unified Portal.
2. In the navigation menu, click Resources > Downloads.
3. In the Virtual Network Appliances section, click the VMWare/Nutanix tab.
4. Click Download.
   Tip:

   If your browser downloads the OVA file in .ovf format, rename the file to change the file extension to .ova.

1. Sign in to your ESXi web UI.
2. Click Create / Register VM.
3. On the Select creation type page, select Deploy a virtual machine from an OVF or OVA file, and then click Next.
4. On the Select OVF and VMDK files page, in the Enter a name for the virtual machine field, enter a name for the virtual machine (VM).
   Note: You must provide a unique name for the VM. If you use a current or past name, it can prevent activation in the management portal.
5. Click Click to select files or drag/drop.
6. Select the OVA file you downloaded, and then click Open.
7. Click Next.
8. On the Deployment options page, in Deployment type, select Virtual Log Collector (vLC).
9. Click Next.
10. On the Additional setting page, click Next.
11. On the Ready to complete page, click Finish.

1. In the ESXi web UI, right-click your VM, and then click Power > Power On.
2. Right-click your VM, and then click Console > Open Console.

Use the serial console to configure the vLC. For more information on using the serial console, see Serial console.

1. When prompted, press Enter three times to initiate the serial console session.
2. At the Select an option to configure your management interface with prompt, select DHCP or enter a static IP address for the virtual appliance management interface.
   Note: If you select DHCP, you must use a DHCP reservation to prevent log collection and connection errors.
3. Select Next.
4. At the Use a proxy? prompt, do one of these actions:
   Note: Only management interface traffic over OpenVPN is sent to the proxy server.

   • If your virtual appliance management traffic goes through a proxy server, select Yes, and then configure these settings:
     • Server IP address — Enter the proxy server IP address for your appliance.
     • Server port — Enter the proxy server port.
   • If your virtual appliance management traffic does not go through a proxy server, select No.
5. Select Next.
6. At the Do you want to verify your network connection? prompt, select one of these options:
   • Yes

     A series of connectivity tests run. If a connectivity check fails, edit your network settings as needed, and then complete the connectivity checks again.

   • No
7. Select Next.
8. At the Tell us about the application you are configuring prompt, configure these settings:
   1. In the Shorthand field, enter a shorthand name for the virtual appliance.
   2. Select VLC.
9. Select Next.
10. When prompted, do one of these actions to connect the virtual appliance to Arctic Wolf:
    Note: Make sure you have the appropriate Arctic Wolf permissions to install the vLC. You can view the permissions in the Contacts page of the Unified Portal or contact your Concierge Security® Team (CST) at security@arcticwolf.com to identify who in your organization has these permissions.
    • On a mobile device — Scan the QR code displayed in the console window, and then follow the on-screen prompts.
      Note: QR codes expire after 15 minutes. A new code appears in the console if the QR code expires.
    • In a web browser — Enter the displayed URL into the URL field, and then follow the on-screen prompts.

    After the virtual appliance successfully connects to Arctic Wolf, a prompt replaces the QR code.

1. Sign in to the Arctic Wolf Unified Portal.
2. If you are a Managed Service Provider (MSP), verify that you are viewing the correct customer organization.
3. In the navigation menu, click Data Collection > Sensors.
4. Find the virtual appliance that you want to activate, and then click View Sensor.
   Tip: Virtual appliances that are not activated have the Awaiting Activation status.
5. Click Activate.
   The console displays Appliance activation in progress, please wait.
6. If you are an MSP, select the same customer organization that you are currently viewing in the Unified Portal, and then Activate Virtual Appliance.
   Note: To activate the virtual appliance for a different customer, switch to that customer organization before completing this step.
   The serial console displays Appliance activation in progress, please wait.
7. In the serial console, when prompted, press Enter three times to activate the console.