--- title: "BlockBox Virtual Appliance: Technical Pre-Work & Prerequisites" description: "BlockBox Virtual Appliance: Technical pre-work" --- [Skip to content](https://support.block64.com/blockbox-virtual-appliance-technical-pre-work#main-content) [Customer Portal](https://customerportal.block64.com/tickets-view?hsLang=en) [![Logo - dark](https://support.block64.com/hs-fs/hubfs/Logo%20-%20dark.png?width=350&height=86&name=Logo%20-%20dark.png)](https://support.block64.com/?hsLang=en) - [Home](https://support.block64.com/) - [Insights Portal](https://insights.block64.com/login) - Platform Show submenu for Platform - [Block 64](https://www.block64.com/) - [Why Block 64?](https://www.block64.com/#:~:text=What%20makes%2CBlock%2064%20different) - Solutions Show submenu for Solutions - [Unified Visibility](https://www.block64.com/solutions/unified-visibility) - [Cost Optimization](https://www.block64.com/solutions/cost-optimization) - [Proactive Security](https://www.block64.com/solutions/proactive-security) - [Compliance](https://www.block64.com/solutions/continuous-compliance) - Learn Show submenu for Learn - [Quick Start Guides](https://support.block64.com/getting-started) - [Integrations](https://support.block64.com/documentation#integrations) - [Blog](https://www.block64.com/blog) - Support Show submenu for Support - [Trust Center](https://trust.block64.com/) - [Service Health](https://status.block64.com/) - [Partners](https://www.block64.com/partners) - [Contact Us](https://www.block64.com/contact) - [Pricing](https://www.block64.com/pricing) - [Get Started Free](https://www.block64.com/free-trial) Open main navigation Close main navigation - [Home](https://support.block64.com/) - [Insights Portal](https://insights.block64.com/login) - Platform Show submenu for Platform - [Block 64](https://www.block64.com/) - [Why Block 64?](https://www.block64.com/#:~:text=What%20makes%2CBlock%2064%20different) - Solutions Show submenu for Solutions - [Unified Visibility](https://www.block64.com/solutions/unified-visibility) - [Cost Optimization](https://www.block64.com/solutions/cost-optimization) - [Proactive Security](https://www.block64.com/solutions/proactive-security) - [Compliance](https://www.block64.com/solutions/continuous-compliance) - Learn Show submenu for Learn - [Quick Start Guides](https://support.block64.com/getting-started) - [Integrations](https://support.block64.com/documentation#integrations) - [Blog](https://www.block64.com/blog) - Support Show submenu for Support - [Trust Center](https://trust.block64.com/) - [Service Health](https://status.block64.com/) - [Partners](https://www.block64.com/partners) - [Contact Us](https://www.block64.com/contact) - [Pricing](https://www.block64.com/pricing) - [Get Started Free](https://www.block64.com/free-trial) - - [Customer Portal](https://customerportal.block64.com/tickets-view) - [Submit a Support Request](https://support.block64.com/kb-tickets/new) [Submit a Support Request](https://support.block64.com/kb-tickets/new?hsLang=en) How can we assist you today? - There are no suggestions because the search field is empty. 1. [Block 64 Support Center](https://support.block64.com/?hsLang=en) 2. [Getting Started](https://support.block64.com/getting-started?hsLang=en) 3. [Discovery Appliance Setup](https://support.block64.com/getting-started?hsLang=en#discovery-appliance-setup) # BlockBox Virtual Appliance: Technical Pre-Work & Prerequisites This article describes all technical pre-work and prerequisites required before deploying the BlockBox Virtual Appliance. Completing this pre-work is essential to ensure a successful deployment and accurate discovery. --- ### 1. What Is the BlockBox Virtual Appliance? The **BlockBox Virtual Appliance** is a hardened Linux-based virtual appliance with an onboard web interface. It is designed to provide a **comprehensive, accurate, and low-impact view** of your IT environment by performing **agentless discovery and inventory**. BlockBox can be deployed as: - **A standalone** **virtual appliance** on a supported hypervisor The appliance is built to discover and inventory: - Windows PCs and servers - Linux, Unix, and Solaris systems - macOS devices - SNMP-enabled Layer 2 and Layer 3 devices - Virtual infrastructure (VMware, Nutanix) - Selected cloud and hybrid environments --- ### 2. How BlockBox Collects Data BlockBox uses a **multi-stage, low-impact discovery process**: 1. **Scanning** - Low-impact TCP SYN scanning across defined subnets - Identifies live devices without disrupting network operations 2. **OS Fingerprinting (Optional)** - Uses lightweight TCP and UDP probes - Helps identify device type and operating system early - Recommended for most environments except very fragile networks 3. **Inventory Collection** - Once a device is validated, BlockBox collects inventory data based on device type This staged approach minimizes network impact while maximizing accuracy. --- ### 3. Data Collected by BlockBox BlockBox collects **technical inventory data only**. It does **not** access personal files, emails, or user-generated content. The performance data the appliance gathers feeds the utilization figures in Insights' Cloud Sizing reports. See [Utilization Collection with On-Prem Collectors](https://support.block64.com/utilization-collection-with-on-prem-collectors?hsLang=en) #### Network Data - IP addresses - Network presence across scoped subnets #### Hardware Data - Manufacturer and model - CPU, RAM, and hardware characteristics #### Software Data - Installed applications - System components - Database instances where applicable #### Active Directory Data - User and device objects - Directory structure - Used for analytics and discovery validation #### Virtual Infrastructure - Hosts, guests, and management relationships - Relevant for cloud readiness and optimization #### Usage & Performance (where supported) - Resource utilization - Activity indicators used for sizing and optimization --- ### 4. Data Access, Privacy, and Retention During an engagement: - BlockBox data may be accessed by Block 64 and/or authorized partners for analysis and support - Data is retained for a limited period and destroyed after engagement completion - Strict security and privacy controls are followed Detailed information is available in the [**Security FAQ**](https://support.block64.com/faqs#security) and [**Privacy Policy**](https://trust.block64.com/) on the Block 64 website. --- ### 5. Platform & Resource Requirements #### Virtual Appliance Recommended Resources - **CPU:** Minimum 4 vCPUs - **Memory:** Minimum 8 GB RAM - **Disk:** Minimum 40 GB storage (thin provisioning supported) #### Supported Platforms - VMware ESXi 6.5 or later - Microsoft Hyper-V 2016 or later - Microsoft Azure - Nutanix --- ### 6. Network Readiness & Placement #### Network Location - The appliance must be placed on a network segment that can **route to all networks in scope** - ACLs on routers, switches, or firewalls must allow communication to endpoints #### Subnets in Scope You must provide: - All internal subnets to be scanned - CIDR notation or individual IP ranges are supported > It is highly recommended to avoid using large subnets unless they are strictly required. Maximum ( /16 ) --- ### 7. Network Ports Used by BlockBox BlockBox uses standard ports that are rarely blocked in enterprise environments. #### Windows Inventory - TCP 135, 139, 445 (WMI, RPC, SMB) - TCP 5985, 5986 (WinRM) - UDP 137, 138 (NetBIOS) - TCP dynamic RPC ranges (1025–5000, 49152–65535) #### Active Directory - TCP 389 (LDAP) - TCP 636 (LDAPS) #### Linux, Unix, macOS - TCP 22 (SSH) #### SNMP Devices - UDP 161, 162 #### Virtual Infrastructure - TCP 443 (vCenter, Nutanix, HTTPS) #### Oracle DB Inventory: - 1521 (Oracle DB Connection) #### External Services - TCP 80 and 443 - Destination URLs: - `combine.block64.com` - `sublimation.block64.com` > **Important:** Endpoints must allow **inbound connectivity from the BlockBox appliance only**. --- ### 8. Security, Firewalls & Endpoint Protection BlockBox is designed to be **agentless**, which requires remote administrative access. #### Required Security Pre-Work - Network firewalls and IPS systems must allow traffic from the appliance - Local endpoint firewalls and security software must allow communication > **Best practice:** > Whitelist the **appliance IP address** across all endpoints and ports. Guides are available for: - [Windows Defender GPO configuration](https://support.block64.com/how-to-open-up-ports-on-windows-firewall-via-gpo?hsLang=en) - [Third-party security software whitelisting](https://support.block64.com/whitelisting-block-64-in-your-endpoint-security-or-threat-management-tools?hsLang=en) --- ### 9. Credential Requirements by Platform #### Windows Inventory - Domain or [limited service account](https://support.block64.com/creating-and-using-a-limited-service-account?hsLang=en) - Access to: - WMI (read-only) - (Polling CPU, RAM Usage & Disk IOPS) - RPC / Remote Registry - (Collection of Software/Hardware data) - SMB (ADMIN$) - (Example: \\\\10.0.0.50\\c$\\... or \\\\192.168.2.5\\ADMIN$\\...) - - [WinRM](https://support.block64.com/how-to-enable-winrm?hsLang=en) - Administrative credentials are recommended but not strictly required if protocols are accessible #### Linux / Unix / Solaris Supported: - Most RPM-based and Debian-based Linux - Oracle Solaris - IBM AIX (limited metrics) Not supported: - IBM i (AS/400) - HP-UX - Gentoo, Slackware, Alpine, Pacman-based Linux Required access: - SSH (TCP 22) - (OSX + POSIX-Compliant Inventory + CLI access) - Credentials that can access the following resources for \*nix systems: - `/proc` filesystem - `dmidecode`(preferred) - Superuser access improves accuracy - Credentials that can access the following resources for Solaris systems: - `/usr/sbin/psrinfo` - `/usr/sbin/prtconf` - `/usr/sbin/smbios` (or eeprom or sneep) #### macOS - Administrator or root credentials - SSH management must be enabled on the endpoint #### VMware & Nutanix - Read-only credentials at vCenter or cluster level - Optional permission for license visibility if required #### SNMP - SNMP v1/v2c read-only community strings - Or SNMP v3 credentials (username, auth, encryption details) --- ### 10. Data Collection Workflow #### Scanning - Low-impact TCP SYN scanning - Builds a list of reachable targets #### Fingerprinting (Optional) - OS and device identification - Reduces unnecessary full inventory attempts #### Inventory Collection - Windows & macOS: hardware, software, serials - Linux/Unix: packages, hardware, system files - SNMP devices: full MIB data - Virtual infrastructure: host/guest relationships --- ### 11. Pre-Work Validation Checklist Before proceeding to deployment, confirm: - ✅ Appliance resources allocated - ✅ Subnets defined - ✅ Required ports open - ✅ Credentials validated - ✅ Security tools configured - ✅ Endpoint communication allowed --- This **Technical Pre-Work & Prerequisites** article is the **authoritative reference** for preparing an environment for BlockBox. Completing this pre-work: - Prevents discovery gaps - Reduces troubleshooting - Ensures accurate and reliable inventory Once all steps are verified, proceed with the [**BlockBox Virtual Appliance Deployment Guide**.](https://support.block64.com/blockbox-virtual-appliance-deployment-guide?hsLang=en) ### Example Network Diagrams ![](https://support.block64.com/hubfs/Knowledge%20Base%20Import/14529063911063.png)![](https://support.block64.com/hubfs/Knowledge%20Base%20Import/14529064957463.png) - [Getting Started](https://support.block64.com/getting-started?hsLang=en#main-content) - [Free Trial Onboarding](https://support.block64.com/getting-started?hsLang=en#free-trial-onboarding) - [Start Your Subscription](https://support.block64.com/getting-started?hsLang=en#start-your-subscription) - [Discovery Application Installation](https://support.block64.com/getting-started?hsLang=en#discovery-application-installation) - [Discovery Appliance Setup](https://support.block64.com/getting-started?hsLang=en#discovery-appliance-setup) - [Discovery Agent Deployment](https://support.block64.com/getting-started?hsLang=en#discovery-agent-deployment) - [Insights Reports](https://support.block64.com/insights-reports?hsLang=en#main-content) - [IT Asset Management](https://support.block64.com/insights-reports?hsLang=en#it-asset-management) - [Security](https://support.block64.com/insights-reports?hsLang=en#security) - [Cloud & Infrastructure](https://support.block64.com/insights-reports?hsLang=en#cloud-infrastructure) - [Legacy Combine User Guide](https://support.block64.com/insights-reports?hsLang=en#legacy-combine-user-guide) - [Troubleshooting](https://support.block64.com/troubleshooting?hsLang=en#main-content) - [Discovery: Insights Portal](https://support.block64.com/troubleshooting?hsLang=en#discovery-insights-portal) - [Insights Calculations](https://support.block64.com/troubleshooting?hsLang=en#insights-calculations) - [Discovery: Block 64 Windows Application](https://support.block64.com/troubleshooting?hsLang=en#discovery-block-64-windows-application) - [Discovery: BlockBox Appliance](https://support.block64.com/troubleshooting?hsLang=en#discovery-blockbox-appliance) - [Block 64 Discovery Agent](https://support.block64.com/troubleshooting?hsLang=en#block-64-discovery-agent) - [Documentation](https://support.block64.com/documentation?hsLang=en#main-content) - [Insights: Integrations](https://support.block64.com/documentation?hsLang=en#insights-integrations) - [Privacy and Security](https://support.block64.com/documentation?hsLang=en#privacy-and-security) - [Block 64 API](https://support.block64.com/documentation?hsLang=en#block-64-api) - [Discovery: General Knowledge](https://support.block64.com/documentation?hsLang=en#discovery-general-knowledge) - [FAQs](https://support.block64.com/faqs?hsLang=en#main-content) - [Security](https://support.block64.com/faqs?hsLang=en#security) - [Block 64 Discovery](https://support.block64.com/faqs?hsLang=en#block-64-discovery) - [New Features & Updates](https://support.block64.com/new-features-updates?hsLang=en#main-content) - [New Features & Updates](https://support.block64.com/new-features-updates?hsLang=en#new-features-updates) - [Combine](https://support.block64.com/new-features-updates?hsLang=en#combine) - [Block 64 Discovery](https://support.block64.com/new-features-updates?hsLang=en#block-64-discovery) - [Remote Discovery Agent](https://support.block64.com/new-features-updates?hsLang=en#remote-discovery-agent) - [Combine API](https://support.block64.com/new-features-updates?hsLang=en#combine-api) - [BlockBox Virtual Appliance](https://support.block64.com/new-features-updates?hsLang=en#blockbox-virtual-appliance) [![Logomark - dark](https://support.block64.com/hs-fs/hubfs/Logomark%20-%20dark.png?width=60&height=96&name=Logomark%20-%20dark.png "Logomark - dark")](http://block64.com) 300 Geary Ave, Toronto, ON M6H 2C5, Canada +1 800-875-5260 [www.block64.com](https://www.block64.com/)