SonicOS 8 NSv Getting Started Guide for Azure

Table of Contents

Installing NSv from Azure Marketplace

You can deploy an NSv directly from the Azure Marketplace by selecting the NSv offering, configuring the required deployment parameters, and creating the virtual machine in your Azure subscription.

To redeploy an NSv in an existing resource group that already contains an older NSv instance, you must use the GitHub deployment template. For more information, see How to re-deploy a NSv in the existing resource group in azure platform.

To install NSv from Azure Marketplace

  1. In your browser, navigate to https://portal.azure.com/ and log in to your Microsoft Azure account.

  2. Navigate to SonicWallNSv on Azure Marketplace at https://azuremarketplace.microsoft.com/en-us/marketplace/apps/sonicwall-inc.sonicwall-nsv-firewall-security-vpn-router, click GET IT NOW, and then click Continue to display the SonicWallNSv (Firewall/Security/VPN/Router)-BYOL page.

  3. On the SonicWallNSv (Firewall/Security/VPN/Router)-BYOL page, click Create.

    The Basics tab of the NSv configuration window displays.

  4. Under Project Details, configure the following options:

    • Subscription – Select the Azure subscription on which to deploy the resources for this NSv instance.
    • Resource groupCreate new or select an existing resource group from the list.

      A resource group is a user defined friendly name for a collection of resources. If you are deploying on Azure for the first time, click Create new. If you already have a network configured and some virtual machines, then you might wish to use an existing resource group. If you are deploying for test purposes, consider creating a new resource group so you can easily delete the resources, if needed.

      • If you select Create new, type a name for this resource group into the associated text field.
      • If you choose Select existing, select the resource group to use from the associated drop-down menu.
  5. Under Instance details, do the following:

    • Region– Select the Azure location where the resources are deployed.
    • VM Name – Type in a descriptive name for this NSv instance. Consider using lowercase letters, numbers and hyphens, as this name is used to create the default DNS Prefix, which has some restrictions. You can, however, adjust the DNS Prefix as needed.

    • The SSH username is set to management by default. This is the user name for accessing the NSv console using SSH. This is not the NSv administrator user name, but is a user name created as part of an NSv deployment.
      • Authentication type – Select either SSH public key or Password as the authentication method for the previous management SSH username. The default for the template is Password.
        • If you selected Password for Authentication Type, type the desired password into the Password and Confirm password fields. The password must be between 12 and 72 characters in length and contain at least three of the following character types:
          • Uppercase character
          • Lowercase character
          • Number
          • Special character (non-alpha-numeric, such as !@#$%^&*()_+}{"|:>?<)
        • If you selected SSH public key for Authentication Type, type the SSH RSA public key file name as a string into the SSH Public Key field.
  6. Click Next to continue.

  7. The Instance Details screen displays.

  8. Select Virtual machine size, displays the NSv model you want to deploy. Click Change size as per the requirements.

  9. Select Virtual Network to configure the virtual network. Create new under Choose virtual network is selected by default and the Create virtual network settings are displayed.

    • Under Create virtual network:

      • Name – This is the name of virtual network the NSv is deployed on. Leave the default, VNET.

      • Address space – The template default is 10.1.0.0/16. This is a network address in CIDR format representing the virtual network address space. Accept the default or optionally configure a different address space, using the same format.

  10. Select Subnets to configure the subnets for the WAN and LAN zones.

    • WAN X1 subnet – A sub-network of the Address space configured in Step 8, defined for WAN traffic. For example, 10.5.0.0/24.

    • LAN X1 subnet – A sub-network of the Address space configured in Step 8, defined for LAN traffic. For example, 10.5.1.0/24.

  11. Select Public IP Address.

    • Create new is selected by default and the Create public IP address settings are displayed. You also have the option to select an existing public IP address to reassign it for use with your NSv.

      • Under Create public IP address, accept the prepopulated name or type a different name into the Name field.

      • For SKU, select Basic or Standard. The default is Basic.

      • For Assignment (if displayed), select Dynamic or Static. The default is Dynamic.

  12. In the DNS Prefix for the public IP Address field, configure the DNS name for the NSv. This must be a unique DNS name for accessing the management interface of the NSv virtual machine. When the NSv virtual machine is created, the WAN uses a public IP and is assigned the DNS name defined here.

  13. In the Management source IP field, type in the public IP address that is allowed to access this NSv virtual machine for HTTPS and SSH management.

    You can find out your public IP address by typing what is my IP into Google or another search engine in a different browser window/tab. Additional addresses can be added later in Azure.

  14. Select Storage Account from the drop-down menu.

    To create a new storage account, click Create new.

    • For a new storage account, type in a unique Name for the storage account using only lowercase letters and numbers.

    • Select the desired options for Account kind, Performance, and Replication.

  15. Click Next.

  16. On the Review + create tab, review the deployment details and then click Create.

It may take some time to deploy the respective NSv resources. To view the progress, click the Notifications icon.

After the deployment completes successfully,

  1. In the left menu, click Virtual Machines, and then select the appropriate virtual machine.
  2. In the Overview section, locate the Public IP address.
  3. Point your browser to the IP address and sign in using the default credentials: admin/sonicwall.

To unlock full system functionality, you must register your NSv virtual machine on MySonicWall. For more information, refer to Registering the NSv Virtual Machine in SonicOS.