You create a site named “Prod-Servers-10.0.0.0/24”. You add the IP range. You set credentials (SSH key for Linux, domain admin for Windows). You click

Default credentials:

wget --no-check-certificate -O insightvm_installer.bin "https://download2.rapid7.com/.../signed-url-token"

You copy the .bin file to /opt/rapid7/ . You run:

Your browser screams: “Your connection is not private.” (Self-signed cert from Rapid7). You click “Accept the risk and continue.”