so Folk's firewall integrates
multiple leading security technologies
into a single solution, which provides
superior protection while simplifying
your cloud architectures and helps
to reduce costs.
Features include next Gen Firewall
Protection, which incorporates a high performance
I PS advanced threat protection
analysis and Cloud based sand boxing
to protect against zero day threats.
A Web application firewall to guard
vulnerable Web facing applications.
Enterprise grade Web and application
filtering to protect users
and servers connecting out to the public.
Internet flexible SD
WHEN and VPN options to
securely connect remote users
and networks to your cloud environments.
And detailed reporting and logging options.
Toe aid in administration and
threat analysis
sofas. Firewall also supports
synchronized security, which allows
your sofas protected endpoints and
servers, both physical and virtual,
to share health
applications and other telemetry
information to improve visibility,
protection and response
to active adversaries.
Both products could be centrally managed
via the SOFA Central Cloud Management
platform.
Together, these features provide the
essential layers of advanced security
needed to properly defend
complex, dynamic cloud
and hybrid environments from
advanced attacks.
In this video, we're going to show you
how you can deploy the sofas, X g,
standalone firewall in your Microsoft
Azure account
as a prerequisite. Make sure
toe have a valid Microsoft Azure
account.
Firstly, let us look at the configuration
steps needed in the azure portal
account. To deploy the firewall,
open the azure portal Web page
portal dot azure dot com
and enter the credentials to log into
the portal.
Then visit the marketplace to see various
deployment options available in
the portal.
Search for the sofas
firewall, and then it will show the
firewall in the results section.
Click on it,
then click the create button.
To proceed with the deployment process,
select the subscription associated
to the azure portal account.
You may select the existing resource
group that might already be created
in the account or create a new one.
By clicking on the create new
option,
enter an appropriate name,
then select the region closest
to you As per your preference.
Enter an appropriate VM name
that will be used to identify the
firewall
in the password. Confirm password
fields. Make sure to enter the same
password in both fields.
This password will be used by the
user name admin toe log
in to the firewall
and then click on the next button
in the license type option.
You can select either B y
o l or P A y G
methods for the X G firewall
instance.
Pay as you go licensing enables
consumption based hourly build
through the azure marketplace, whereas
the bring your own license requires
you to acquire a license from a
Sofus reseller.
In this video, we will select
B Y O L. As the method.
Virtual machine size would be the size
of the firewall. VM instance.
The default size selected is standard
F to S V to
having to virtual CPUs
and four gigs of memory.
As this is the minimum specs required
for the firewall.
You may change this size as
per your requirement by clicking
on the change size
option
in the virtual network section, you
can choose the already created
virtual network or create
a new one.
Once you click on the create new
option, a new pop up window
will appear.
Enter an appropriate name for the Virtual
network
address Range will be the I. P
address, sub net of the entire virtual
network and usually is configured
with a slash 16 c
i. D. R
In the sub net section you
can given appropriate name for the land
and land networks and assign
the I p address range to both those
sub nets from the Virtual Network Address
Range Network.
This is generally configured with a slash
24 c i D. R.
In this video, we have configured
10 20.1 dot zero
slash 24 for the land
sub net
and 10. 22 0
slash 24 for the whan
sub net of the firewall.
Once this is done, click on the
OK button.
Select the newly created sub nets for
the land Sub net and land sub
Net of the firewall
for the Public I P. Name. You
can either select an existing public
I P or create a new one.
Upon clicking the create new
option, a new pop up window will
appear, and there you need to give an
appropriate name for the new public
I P address.
Select the required skew and
then select the I P assignment type,
either as dynamic or static.
Then click on the OK button,
then configure a unique domain
name that will be used to access
the Web. You, I and ssh! Console
of the firewall VM
instance.
In the storage account section,
you can choose the existing storage
account or create a new one.
Once you click on the create new
option, a new pop up window
will appear.
Enter a unique name for the storage
account
in the account kind section.
Various types of storage accounts are
available that you can use.
The default selected option is
storage general purpose the
one
Then you can either select the
standard or premium option
for the Associate ID storage account.
In the replication section,
you can either select locally redundant
storage or geo redundant
storage.
The default selected option is
locally redundant or L R
s.
Once these parameters have been selected,
click on OK and
then click on the next review,
plus create button.
After the validation check is successful,
it will show a summary of all the
parameters. Associate ID with the
firewall instance,
and once they have been reviewed,
click on the create button to
initiate the deployment of the X G
firewall in your azure portal
account.
The deployment process will typically
take a few minutes, and once it is
finished, it will show a message saying
that deployment is complete.
You can then click the go to
resource group button to see
the resource is that have been deployed in your
account along with the
firewall. VM Instance.
Now let's see the steps needed to
access and manage the sofas.
Firewall.
Click on the firewall VM
name. To see its properties,
you can see the public I, P address
and the DNA's name associated
with the VM instance.
Copy the DNAs name by clicking
on the copy icon.
Open a new browser window and
access the firewall
on https Port 4444
with the DNS name.
X G Firewall uses a self
signed certificate by default. Hence,
the browser will display a warning message.
After accepting it, it will display
the welcome page.
Enter the user name as admin
and the password that was initially used
in the deployment process
and then click the log in button,
read the sofas, end user license
agreement and then click on the
I Accept button. If you agree
to those terms and conditions, if
the customer doesn't have the serial
ID of the X G firewall,
they can select the second option and
proceed
so that a new customer portal account
will be created and the X
g serial I'd will be automatically
created and used for the registration
process.
Customers migrating from a Sofus
S G u T M device to
X G can select the
third option
optionally. The registration process
can be skipped temporarily
and the customer can immediately start
using the firewall.
However, it cannot be used
beyond 30 days
in this video. Since we have considered
the B y O L deployment method
and assuming the customer has already
received the serial idea of
the firewall from the
sofas team,
we will go for the first option.
Enter the serial I'd
and click on the continue button.
It will redirect you to the my sofas
portal for the extra firewall
registration process, wherein
you can select the create sofas.
I'd option for a new account
or use the sign in button
to use an existing account.
In this video, we are selecting
the sign in button.
Enter the email ID and password
of the existing My Sofus account.
After verifying the capture,
click on the continue button.
It will show the serial number and
the firewall model.
Click on the confirm registration
button to initiate the license synchronization.
Once the license synchronization process
is completed,
it will show various licensing modules
that air subscribed. Along
with the expiry dates.
Click on the continue button.
This will finish the deployment process
of the firewall and
will redirect you to the main dashboard
page.
Optionally the land sub net traffic
going to the Internet can be routed
via the firewall,
and to do that, you need to switch back
to the azure portal account.
Make sure that the firewall VM
instance is turned off before
making these changes
in the azure portal. Navigate
to the same resource group and then
click on the X G Land
Interface Port A.
Go to the settings
I p. Configurations and
then click on I P. Config.
Make sure to select the assignment, type
as static and then click
on the save button.
Now the next step is to create
a route table, so in
the search text box, type in
route table,
select it
and then click on the add button.
Select the subscription associated
with your azure account.
Select the same resource group that has
the sofas
firewall,
select the Associated Region
and type in an appropriate name for
this route. table,
Then click on the review, plus
create button.
Once the validation check is past,
click on the create button.
Now open the route table
and then navigate to settings
sub nets
and click on the associate
option.
Select the virtual network created
earlier during the deployment
process,
select its associated land sub
net and then click on the OK
button
in the same route table. Navigate
to settings routes
and click on the add option.
Enter an appropriate route name.
Keep the address prefix as
0.0 dot 0.0
slash zero, which means
that it will be applicable to any destination.
Traffic originated from the
land network.
Then select the next hop type
as virtual appliance.
Enter the static I P address
of Port A 10 20.1
dot four as the next hop
address and then click on
the OK button.
So with this route table configuration,
all the traffic originating from
the land sub net will be routed
via the port. A interface
of the firewall.
Please feel free to go through these additional
resource is form or information,
so in this way you can deploy
and manage sofas. Extra firewall
in your Microsoft azure account,
we hope you like this video and thank
you for watching