Technical Tip: Setting up FortiSIEM in Proxmox

[ogullikstad]

Description	This article describes how to set up FortiSIEM in Proxmox for lab usage.
Scope	Since Proxmox is not supported officially for production this guide is intended for lab usage, and it is expected that the Proxmox server has been configured before this installation.
Solution	Start by downloading the KVM SW from support.fortinet.com Unzip the content and upload the .qcow2 file to the root folder of the Proxmox server using SCP. Create the VM in Proxmox by 'right-clicking' and choosing 'Create VM'. Give it a name (in this case 'Supervisor'), and make a note of the VM ID (102). It is preferable to choose 'Start at boot'. When this is done, press 'Next'. Select 'Do not use any media', and use Guest OS settings as shown in the picture. Press 'Next'. Go with the default settings on the next option (as shown below), and press 'Next'. Add disks as described in the Set-up guide for the type of server setup (Supervisor, Worker, Collector). Delete Disk 'scsi0' (this spot will be used later when importing the .qcow2 file). Press 'Next'. Add CPUs as described in the install guide (and supported by the HW) press 'Next'. Add memory as stated on the FortiSIEM Install guide, be aware that Proxmox uses MiB (mebibyte), so use a GB to MiB calculator to find the correct number. Press 'Next'. Set up the network with the correct bridge (In this example it is vmbrSRV). Press 'Next'. Confirm the settings by pressing 'Finish'. Now there should be a server (in this example 102 Supervisor) partly ready and defined on the Proxmox. Now, it is necessary to find which Storage to import the .qcow2 file to (let's use Datadisk here). It is now necessary to open a shell on the Proxmox server. Now, let's import the .qcow2 file to the Storage desired to be used. Go to the location where the file has been uploaded. Use this command 'qm importdisk 102 FortiSIEM-VA-7.1.5.0181.qcow2 Datadisk'. The variables here is '102' this is the VM ID of this example. Next is the Filename 'FortiSIEMxxxxxx' and then it is the Storage 'Datadisk'. Press 'Enter' and it will show something like this: Wait for it to finish and show something like this: Go back to the Proxmox GUI. It shows that the VM now has a new Disk called 'Unused Disk xxxxxx'. It is now necessary to assign this to scsi0 on the VM. Select the 'Unused disk xxx' and press 'Add'. It should show a new disk in scsi0 on the VM. It will also be necessary to go to 'Options' and make sure that 'scsi0' is the first in the boot order. Make sure 'scsi0' is marked as 'Enabled'. It is ready to start up the VM. Highlight the VM (Here '102 Supervisor', and also '>_ Console'). It will show the option to 'Start now' in the middle of the console window.  It will show this:  Follow the instructions in the FortiSIEM KVM install guide.