Deploy in Azure

Learn how to deploy your first TrapEye instance in Microsoft Azure. This guide focuses on the manual deployment through the Azure portal, but the same workflow applies when using IaC tools such as Terraform or the Azure CLI.

1. Navigate to Network foundation -> Virtual networks and select the private network where your TrapEye agent will be deployed.

   Write down the Name and Location of the private network, you will need this information during the vm creation process.

   

2. Log in to the TrapEye Portal, go to Management → Installation and download the latest TrapEye Azure image (.vhd format).

   

3. Go to Storage center -> Blob storage in the Azure Portal and create a new storage account if you do not already have one available in the same region as your target virtual network.

   Create a Container inside the storage account to host the TrapEye image.

   

4. Upload the downloaded .vhd file to your container, make sure to select the Page blob storage type.

   

5. Navigate to Compute infrastructure -> Custom images in the Azure Portal and click on Create to create a new custom image.

   

6. Configure the following fields:

   Field	Recommended Value
   Name	trapeye-image
   Region	Must match the region of your virtual network
   OS type	linux
   VM generation	Gen 1
   Storage blob	Click Browse and select the uploaded .vhd file from your storage account.
   Account type	Standard SSD

   

1. From the created custom image, click on Create VM to start the virtual machine creation process.

   

2. Choose a Ressource Group, Name and Size for your virtual machine using the recommended values below:

   Resource	Minimum Value	Recommended Value
   CPU	1 vCPUs	2 vCPUs
   Memory	1024 MiB (1 GB)	4096 MiB (4 GB)
   Disk	10GB	10GB

   

3. In the Networking tab, select the Virtual network identified in the earlier steps. Choose a Subnet and set the Public IP to None.

   

4. From the TrapEye Platform, go to Management → Installation and copy the values for url, entity_uuid, and auth_token.

   

5. Replace the placeholder values in the template below with your TrapEye configuration parameters., then paste the final result into the Custom Data field in the Advanced tab.

   #cloud-config
   write_files:
     - path: /etc/trapeye/auth-config.toml
       permissions: '0600'
       content: |
         url = "INGESTION-URL-HERE"
         entity_uuid = "ENTITY-UUID-HERE"
         auth_token = "ENTITY-TOKEN-HERE"

   Example:

   

6. Click Add to build the virtual machine.

Your TrapEye virtual machine has been successfully deployed in Azure.

It will now appear in the Devices section of the TrapEye Deception Platform, and you will begin receiving real-time alerts as soon as any activity is detected.