Install RNA Virtual Scanner Appliance

The virtual scanner can be installed on a computer or virtualization host with the required resources. Supported virtualization platforms include VMware, VirtualBox, and Nutanix AHV.

Install and activate the RNA virtual scanner appliance by performing the following steps (see below for detailed instructions):

  1. Deploy the virtual scanner on your virtualization environment.
  2. Configure your network RNA profile for a static IP, if necessary.
  3. Activate the virtual scanner appliance.

Host System Requirements

This section describes the requirements necessary to host the RNA virtual scanner appliance image.

Supported Virtualization Platforms

Host Operating System Version Virtualization Platform (Hypervisor) Virtual Scanner Appliance File
VMware ESXi Server 6.5 and later Native OVA
Windows Desktop / Laptop 10 and later VMware Workstation 14.x and later
Oracle VirtualBox 6.1 and later		 OVA
macOS Sonoma and later VMware Fusion 10.x and later
Oracle VirtualBox 6.1 and later		 OVA
Linux Ubuntu 22.04 Desktop and later Oracle VirtualBox 6.1 and later OVA
Nutanix On-Premises Prism Central / Element; AOS 5.20 / AHV 20201105 or later Native Nutanix AHV OVA

Minimum Hardware Requirements

Component Requirement
VM Hardware Version VMware Virtual Machine Hardware Version 13 or later for VMware deployments
CPU Intel or AMD x86 processors, 2 or 4 CPUs, 2 GHz or higher
Memory 4 GB RAM (Minimum)
Hard Disk 60 GB free space
BIOS Virtualization Technology BIOS Virtualization Technology must be enabled. By default, this setting is not enabled on most laptops.
Peer Images Other virtual machines may run alongside the RNA if the host continues to provide the RNA with the required CPU and memory resources and at least 10 Mbps of bandwidth.
Network Location The virtual scanner should be hosted within the internal network in a location where the virtual scanner can be allowed to connect back to the Fortra Appliance hosted instance of Fortra VM.
TIP: Host the virtual scanner in a location with controlled access because of the sensitivity of the data it collects.
Physical Connections & Ports Host system network configuration should be a Cat 5 or above network cable with a network connection speed (throughput) of 100 MB or above.

The virtual scanner establishes a secure connection with Fortra VM On-Premises over TCP ports 31090, 31002, 31092, and 31099 (HTTPS).
NOTE: If your location uses an application-based proxy, firewall, or perimeter security device that inspects traffic and you experience activation problems, contact Fortra Support.

Other considerations for macOS: The virtual machine’s available bandwidth is limited by default. If this limit is exceeded when a scan starts, a dialog requests permission to grant more bandwidth to the virtual machine. Accept the request so the virtual scanner can function optimally.

Deploy RNA

The following instructions describe how to deploy the RNA virtual scanner appliance on your virtualization environment.

Select the applicable virtualization platform:

  1. Log in to your VMware ESX Server using the vSphere web client (or VMware Player, Workstation, or Fusion application).
  2. From the vSphere client window, select File > Deploy OVF Template.
  3. On the Source page, browse to the downloaded FrontlineVirtualRNA.ova file and then select Next.
  4. On the OVF Template Details page, select Next.

  5. On the Name and Location page, optionally enter a unique name for the scanner. If applicable, select the folder location or data-center for the virtual scanner and then select Next.

    NOTE: If the vSphere Client is connected directly to an ESX/ESXi host, the option to select the folder location does not appear. If connected directly to a ESX/ESXi host, skip to the Storage page.

  6. If applicable, on the Host / Cluster page, select the host or cluster for the virtual scanner and then select Next.

    NOTE: To scan the selected host or cluster, it must have access to the network.

  7. If applicable, on the Specific Host page, select the specific host for the virtual scanner and then select Next.

    NOTE: This page appears only if the destination is a resource pool associated with a cluster with DRS disabled or in manual mode. If not applicable, skip to the Storage page.
  8. On the Storage page, select where to store the files for the deployed virtual scanner and then select Next.
    9. NOTE: If no external storage is configured, only local storage will be available.

  9. On the Disk Format page, select the required format for virtual machines and then select Next.

    NOTE: Thin provisioning lets you create sparse files with blocks that are allocated upon first access, which allows the datastore to be over-provisioned. The sparse files can continue growing and fill the datastore. If the datastore runs out of disk space while the virtual scanner is running, it can cause the virtual scanner to stop functioning.
  10. On the Network Mapping page, select the destination network you want to scan and then select Next.
    11. NOTE: If you are using VMware Fusion or Workstation, verify that the network connection type is set to Bridged.
  11. On the Ready to Complete page, select Finish.

  12. Right-click the new deployment and then select Edit Settings. Under Virtual Hardware, confirm that the settings for CPU, Memory, and Hard Disk are meeting or exceeding the minimum requirements specified under Host System Requirements.

    IMPORTANT: Confirm the CPU, Memory, and Hard Drive settings are correct before powering on the appliance for the first time. While you can increase the CPU and Memory settings afterward, the Hard Disk settings must be accurate before the first initialization.
  13. On the vSphere client window, right-click the virtual scanner on the left panel, and then select Power > Power On.
  14. Right-click the scanner again, and then select Open Console.
    15. NOTE: If prompted with a GNU Grub screen, click within the console and select Enter to select the default option.

The RNA virtual scanner appliance will boot into a console. The scanner may take a few minutes to start.

If Dynamic Host Configuration Protocol (DHCP) is in use on the network, the scanner should automatically connect to the network and the System Status: RNA Link field will indicate the scanner status. Online displays after the RNA is successfully activated and able to connect with Fortra VM, prior to successful activation the status will display as Offline. If the virtual scanner is unable to use DHCP to connect, create a static IP network profile.

NOTE: If DHCP has provided network connectivity, continue to Activate RNA. If the scanner cannot connect using DHCP, continue to Configure Network Profile.
  1. Double-click the downloaded FrontlineVirtualRNA.ova file.
  2. The first time this file is invoked, an Import Virtual Appliance window displays. Select Import. The FrontlineVirtualRNA scanner will appear, powered off, in the left pane of the Oracle VM VirtualBox Manager.
  3. Select the virtual scanner, and then select Start to power it on. The RNA virtual scanner appliance will boot into a console. The scanner may take a few minutes to start.

  4. Select the new VM and go to Settings > System. Under the Extended Features section, ensure the check box for Enable EFI (special OSes only) is checked. Two banner messages will display regarding keyboard and mouse integration. Dismiss these messages.

    IMPORTANT: If the VM displays an error reading " FATAL: No bootable medium found! System halted.", you must click on the new VM and navigate to Settings > System. Under the Extended Features section, ensure the checkbox for Enable EFI (special OSes only) is selected.
    If the RNA starts up and displays a login prompt instead of the standard RNA interface, perform the following:
    • First attempt to cycle through different ttys. The GUI is typically on ttys2, use CTRL + ALT+ F2 if the login prompt is on tty1.
    • If that isn't successful, power off the VM and navigate to Settings > Display . Under the Graphics Controller, VBoxVGA is likely selected by default. Change the selection to VMSVGA and power on the RNA to see if the RNA GUI is brought up. If not, power off the RNA and try VBoxSVGA, power it on and see if the issue of the GUI display is resolved.

  5. Click within the virtual scanner display to activate mouse capturing, and then select Capture.

If Dynamic Host Configuration Protocol (DHCP) is in use on the network, the scanner should automatically connect to the network and the System Status: RNA Link field will indicate the scanner status. Online displays after the RNA is successfully activated and able to connect with Fortra VM, prior to successful activation the status will display as Offline. If the virtual scanner is unable to use DHCP to connect, create a static IP network profile.

NOTE: If DHCP has provided network connectivity, continue to Activate RNA. If the scanner cannot connect using DHCP, continue to Configure Network Profile.

  1. Sign in to Nutanix Prism Central or Prism Element, then navigate to Compute > Images.

  2. Select Add Image and select FrontlineVirtualRNA.ova. Set Image Type to DISK, complete the configuration, then select Save. Wait for the upload task to complete.

  3. Navigate to Compute > OVAs, select the uploaded OVA, then use Actions to select Deploy the VM.

  4. Enter a scanner name. Verify that CPU and Memory meet or exceed the values in Host System Requirements.

  5. Under Resources, review the Disk and other resource settings, then configure the network.

  6. Under Management, review the settings.

  7. Under Review, verify the configuration, then select Create VM.

    IMPORTANT: Confirm CPU, Memory, and Disk settings before powering on the appliance for the first time.

  8. Navigate to Compute > VMs and select the new VM.

  9. Select Actions > Power Operations/Power to power on the VM.

  10. Open the VM details and use Console to monitor startup.

The RNA virtual scanner appliance starts in a console. Startup may take a few minutes.

NOTE: If DHCP has provided network connectivity, continue to Activate RNA. If the scanner cannot connect using DHCP, continue to Configure Network Profile.
IMPORTANT: Do not clone the virtual RNA before or after activation. Cloning may prevent successful communication between the RNA and Fortra VM On-Premises.

Configure Network Profile

The following instructions describe how to configure the virtual scanner to use a static IP.

If Dynamic Host Configuration Protocol (DHCP) is in use on the network, the scanner should automatically connect to the network. The System Status: RNA Link field indicates the scanner status. Online displays after the RNA is successfully activated and able to connect with Fortra VM On-Premises. Before successful activation, the status displays as Offline.

If the virtual scanner cannot connect using DHCP, create a static IP network profile. If it already has network connectivity, continue to Activate RNA.

To configure the virtual scanner to use a static IP

  1. From the RNA console, select Edit under Network Status.

  2. From the drop-down list, select Static.

  3. Enter the following information (consult with your IT department for this information):

    1. IP Address - The IP address for the virtual scanner.
    2. Netmask - The subnet mask for the virtual scanner.
    3. Gateway - The IP address for the gateway device available to the virtual scanner.
    4. DNS Server - The IP address for the DNS server available to the virtual scanner.

  4. Select Save.

The virtual scanner should now connect to the network.

Activate RNA

IMPORTANT: To use a custom certificate instead of the default self-signed certificate, you must upload a custom TLS certificate in the Fortra Appliance on port 4443 before creating a scanner. See Certificates in the Fortra ApplianceUser Guide for more information.

To activate your virtual scanner

  1. Once the scanner has network access, leave the RNA virtual scanner appliance console running.

  2. Open Fortra VM.

  3. From the navigation menu, select Scan Settings > Scanners.

  4. Select the Appliance Tokens tab. The Appliance Tokens page will indicate the total number of activations available.

    NOTE: If you do not have any activations available, contact Fortra Support.

  5. Select New Token to generate a new activation token.

  6. In the RNA console, select Console and then run the onprem-ip command with the IP address of the Fortra Appliance appliance (for example, onprem-ip 10.10.10.10).

  7. On the RNA virtual scanner appliance console, enter the token in the Enter your activation key box.

  8. Select Activate RNA.

  9. Once activated, you will see the message, "Activation Successful: This device is ready to use." You are now ready to run your first scan.
    See related: Create and Run Scans.

Refer to Virtual RNA Troubleshooting for additional guidance and support.

NOTE: If the virtual RNA is installed on a workstation, the workstation will need to remain powered on and have network connectivity for any scans to run.

For information regarding connectivity issues and troubleshooting, see Virtual RNA Troubleshooting