Overview

WatchGuard Dimension™ is a cloud-ready network security visibility solution included as a template on OrionVM. It provides a suite of big data visibility and reporting tools that instantly identify and distill key security issues and trends, and deliver valuable insights to set meaningful security policies across the network.

This section will guide you through the process of provisioning and deploying a Dimension instance on OrionVM.

NOTE: WatchGuard products on OrionVM are Bring Your Own Licence (BYOL). Licences can be acquired by contacting a WatchGuardONE Certified Reseller.


Creating Your Dimension Instance

You create a WatchGuard Dimension instance from a template, much like an Ubuntu or CentOS instance. From the Dashboard screen, click the Launch Instance button, which will redirect you to the Instances screen.

On the Instances screen the New Instance panel will display. Under the second column labeled Disks, under New Instance Boot Disk select WatchGuard Dimension from the dropdown list. Feel free to rename the instance by clicking the pencil icon next to the name at the top.

The minimum specs for a WatchGuard Dimension instance is as follows:

  • 1 vCPU
  • 4GB RAM
  • 10 GB Boot Disk
  • 50 GB Data Disk
  • 1 Public IP Address

Note that WatchGuard Dimension requires a 50 GB Data Disk to be attached at creation to automatically configure correctly. To do so, under Disks click Attach disk... and select Blank disk from the drop down window.

Once you have defined your requirements, click Create and Start to create and start the instance.


Setting a Static IP for Dimension

To access the wizard for the rest of the Dimension setup process we must first set a static IP address for the Dimension external interface. To do so we will use the Out-of-Band Console.

On the Instances screen, on the right of the Dimension instance click the gear and select Launch Console from the drop down menu.

Once the instance has finished booting the console will prompt you for a username and password. We will be using the wgsupport user with the default password readwrite to connect. Note that on first login to this account you will be prompted to change the default password.

The command to set the static IP is as follows:

/opt/watchguard/dimension/bin/wg_ip_addr.sh -i <IP address> -m <mask> -g <gateway>

For example, to configure Dimension with a static IP address of 203.0.113.201/24 and a gateway of 203.0.113.1, type:

/opt/watchguard/dimension/bin/wg_ip_addr.sh -i 203.0.113.201 -m 24 -g 203.0.113.1

If you would like to copy and paste the above command and modify it in the Out-of-Band Console window itself click Paste Text at the bottom right and use the input box that appears.


Run the WatchGuard Dimension Setup Wizard

After your Dimension VM is set up and powered on, you can connect to Dimension to run the Dimension Setup Wizard and complete the configuration for your Dimension system.

Before you start the Setup Wizard, make sure you have this information to add in the wizard:

  • Host name for Dimension
  • IPv4 settings for the Eth0 interface
  • Log Encryption Key
  • Administrator passphrase

To access the Dimension Setup Wizard navigate to the public IP address using your web browser of choice. For example, for the IP set above you would type 203.0.113.201 into your browsers URL bar and press enter.

The default admin login for Dimension is admin and the password is readwrite. Once you have logged in, follow the wizard to finish the setup process, during which you will be prompted to change the password for the admin account.

You can now login to the Dimension portal using your new admin credentials.


See Also

After you have completed the wizard and logged in to Dimension, you can complete the configuration settings for your Dimension system and Log Server, create report schedules, and manage users, as described in these topics from WatchGuard's official documentation: