Table of Contents

• Server setup
  • QRadar OS installation
  • QRadar OS configuration
• Client setup
  • Debian
  • Windows
    • VirtualBox: Portforwarding for QRadar WebUI access
    • Ping connection test
• Result

Server setup

QRadar OS installation

Launch the installation media in VirtualBox. Make sure the virtual machine has allocated at least 16GB of memory and 6 processors. Have it create a dynamic virtual hard disk of up to 200 GB. The virtual machine is also to be assigned to a "NAT Network" (not "NAT")

When prompted for the first time with halt, reboot, flatten, or wipe, type in flatten

Initial setup script...

When prompted for the second time, type in halt

Now remove the installation media, and then start up the VM

Initial setup will continue automatically

You will be prompted to login. You will always sign in with the root account (no password required the first time).

Accept the EULA

QRadar OS configuration

For functionality, make sure to select All-in-One Console

My network configuration that aligns with my VBox NAT Network settings

Initial setup and configuration complete

Client setup

Debian

Assigning static IP address at initial setup of Debian

Assigning the gateway address

Assigning the nameserver address (same as gateway)

Windows

Assigning static IP to Windows 11 virtual machine

Set the network as Private

VirtualBox: Portforwarding for QRadar WebUI access

VBox network settings

Ping connection test

By pinging QRadar's IP address, I can determine whether the Windows host can communicate with the QRadar server, which it does.

Result

Setup complete, and I can access the QRadar through the WebUI on the Windows VM