Setting up NetScope under Windows Hyper-V 2012 R2

Setting up NetScope under Windows Hyper-V 2012 R2 involves importing the NetScope VM and setting up the networking.

To import the NetScope VM open the ‘Hyper-V Manager’.

1. Select the hyper-v server from the left hand menu.
2. Click on ‘Import Virtual Machine’ from the ‘Actions’ pane.

 

 

The ‘Import Virtual Machine’ wizard will open. Click ‘Next’.

 

 

1. Browse to the folder where your NetScope virtual machine is stored. NOTE: if you’ve downloaded this file from netscope.com.au you may need to unzip the file first.
2. Click ‘Next’.

 

1. Select the virtual machine you want to import. In this case it is ‘NetScope 2.0-109 DEMO’.
2. Click ‘Next’.

 

1. Choose the import type. You can leave the default setting unless you’ve already got another instance of the NetScope VM installed. If you already have an existing instance of the NetScope VM you’ll need to select ‘Copy the virtual machine…’.
2. Click ‘Next’.

 

The Summary window will show you some details of the import. Click ‘Finish’ to complete importation of NetScope.

 

NetScope should now be imported into Hyper-V. Good work. Next step is to configure networking so that NetScope can collect data coming from your virtual Firewall or Router.

1. Select NetScope from the ‘Virtual Machines’ window you imported in the previous steps.
2. Click on ‘Settings’ under the ‘Action’ pane.

 

1. Choose the second ‘Network Adapter’ from the ‘Hardware’ pane.
2. Under the ‘Virtual switch’ drop-down menu select the same virtual switch that the Firewall / Router uses to send data to the rest of the Hyper-V environment.

 

1. Without pressing ‘OK’ choose the second ‘Network Adapter’ from the hardware menu again. Click and expand this menu item and underneath you should see ‘Advanced Features’.
2. Click on ‘Advanced Features’ and the pane to the right will change.
3. Under ‘Port mirroring’ use the drop-down list and set ‘Mirroring mode’ to ‘Destination’.
4. Click ‘OK’.

NOTE: this tells Hyper-V that the NetScope VM Network Adapter is allowed to receive data from a ‘Source’ device.

 

Next we need to tell Hyper-V to send data to NetScope by changing the settings of the Network Adapter on your Virtual Firewall or Router.

1. Select the Hyper-V server.
2. Select your Firewall or Router.
3. Click on ‘Settings’ to open up the hardware configuration wizard.

 

1. Select the Network adapter on your Firewall / Router that you want to mirror to NetScope.
2. Expand the Network Adapter so that you can see ‘Advanced Features’ and click on it. The pane to the right will show the advanced settings.
3. Under ‘Port Mirroring’ use the drop-down list and choose ‘Source’.
4. Click ‘OK’.

 

Congratulations. Your Firewall / Router should now be sending traffic data to the Destination address on NetScope.

Next power ‘Connect’ and ‘Power On’ the NetScope Virtual Machine. Once it has booted the NetScope console will display the IP address for the management interface. Connect your browser to this address to start playing!