Installing NSv on Azure Government Cloud

To install from Azure Marketplace

1. In your browser, navigate to https://portal.azure.us and log into your Microsoft Azure Government account.
2. Navigate to SonicWall NSv on Azure Marketplace, click GET IT NOW, and then click Continue to display the SonicWall NSv (Firewall/Security/VPN/Router)-BYOL page.
3. On the SonicWall NSv (Firewall/Security/VPN/Router)-BYOL page, click Create at the bottom to get started.

   

   The Basics screen of the NSv configuration window displays.

4. On the Basics screen, configure the following options:

   • Subscription – Select the Azure subscription on which to deploy the resources for this NSv instance.

   • Resource group – Create new or select an existing resource group from the list.

     A resource group is a user defined friendly name for a collection of resources. If you are deploying on Azure for the first time, click Create new. If you already have a network configured and some virtual machines, then you might wish to use an existing resource group. If you are deploying for test purposes, consider creating a new resource group so you can easily delete the resources, if needed.

     • If you select Create new, type a name for this resource group into the associated text field, and then select a location for it from the Location drop-down menu. For example, name can be jl2023feb4nsv270.
   • Location – The Azure location where the resources are deployed is auto-filled as USGov.

   • VM Name – Type in a descriptive name for this NSv instance. Consider using lowercase letters, numbers and hyphens, as this name is used to create the default DNS Prefix, which has some restrictions. You can, however, adjust the DNS Prefix as needed.

   • Authentication type – Select either SSH public key or Password as the authentication method for the previous management SSH username. The default for the template is Password.
     • If you selected Password for Authentication Type, type the desired password into the Password and Confirm password fields. The password must be between 12 and 72 characters in length and contain at least three of the following character types:
       • Uppercase character
       • Lowercase character
       • Number
       • Special character (non-alpha-numeric, such as !@#$%^&*()_+}{"|:>?<)
     • If you selected SSH public key for Authentication Type, type the SSH RSA public key file name as a string into the SSH Public Key field.

       

5. Click Next: Instance Details to continue.

   The Instance Details screen displays.

6. In Instance Details configure the following:

   1. The Virtual Machine size and Virtual Network fields are auto-filled.

   2. Select Subnets to configure the subnets for the WAN and LAN zones.

      • WAN X1 Subnet – A sub-network of the Address space configured in Step 7, defined for WAN traffic. For example, 10.5.0.0/24.

      • LAN X0 Subnet – A sub-network of the Address space configured in Step 7, defined for LAN traffic. For example, 10.5.1.0/24.

   3. Select Public IP Address. Create new is selected by default and the Create public IP address settings are displayed. You also have the option to select an existing public IP address to reassign it for use with your NSv.

   4. In the DNS Prefix for the public IP Address field, configure the DNS name for the NSv. This must be a unique DNS name for accessing the management interface of the NSv virtual machine. When the NSv virtual machine is created, the WAN uses a public IP and is assigned the DNS name defined here.

   5. In the Management source IP field, type in the public IP address that is allowed to access this NSv virtual machine for HTTPS and SSH management.

      You can find out your public IP address by typing what is my IP into Google or another search engine in a different browser window/tab. Additional addresses can be added later in Azure.

      

   6. Select Storage Account. Create new is selected by default, displaying the Create storage account settings. You also have the option to select an existing storage account.

      1. For a new storage account, type in a unique Name for the storage account using only lowercase letters and numbers. For example, jl2023feb4nsv270sa.

      2. Select the desired options for Account kind, Performance, and Replication.

      3. Click OK.

   7. Click Next: Review + create.

      Azure validates the configured settings and checks fore errors before building the virtual machine.

7. Click Create.

   

   Azure begins the deployment process and displays the Azure Dashboard page.

   You can click the Notifications icon at the top to display the Deployment in progress notification window, then click Deployment in progress to view the progress.

   

   When finished, the notification window displays Deployment succeeded.

   

8. Click Go to resource group.

   Your resource group will show a list of items, including Virtual network, Virtual machine, Storage account, Public IP address, Network security group, Network interfaces, and Disk.

   

9. Click on Public IP address.

10. In the Overview screen, the IP address of the NSv is displayed under Public IP address.

    

11. Point your browser to https://<Public IP address>, using the public IP address of your NSv.

12. Log into SonicOS.

13. Enter the default credentials username and password.

14. Your default password must be changed at first time while logging in after upgrade. Create a password that meets the security requirements. A password should have at least one uppercase letter, one lowercase letter, one number, and one special character. For example, 6tY%^01*7vqnQKZ7AEbg>py.

    

15. Perform the following steps to change password:

    1. In Old Password enter your default password that was provided.

    2. In New Password enter your new password.

    3. In Confirm Password re-enter the new password again.

16. Click Change Password.

17. The next step is to register your NSv virtual machine on MySonicWall. See Registering the NSv Virtual Machine with SonicOS for more information about registering your NSv virtual machine available in the Azure portal.