SonicOS 8 NSv Getting Started Guide for Azure

Table of Contents

Installing Windows 10 from Console

Create a Windows 10 Virtual Machine (VM) similar to the NSv on the Azure and configure the settings to send the Windows 10 VM's outbound traffic to the NSv LAN interface.

To create a new subnet, follow these steps

  1. In your browser, navigate to https://portal.azure.us and log in to your Microsoft Azure Government account.

  2. Navigate to Virtual networks and select the installed NSv firewall.

  3. Under Settings, click Subnets.

  4. Add + Subnet

    1. In Name, enter a new subnet name, for example, LAN-25.

    2. In Subnet address range, enter a new address. for example, 10.5.25.0/24.

    3. Leave the rest of fields with default values.

    4. Click Save.

To install Windows 10 from the console, follow these steps

  1. In your browser, navigate to https://portal.azure.com/ and log in to your Microsoft Azure account.

  2. Search for Windows 10 and select Microsoft Windows 10.

  3. Click Create.

    The Basics tab of the NSv configuration window displays.

  4. On the Basics tab, configure the following options:

    1. In Subscription, select the NSv Firewall.

    2. The Resource Group might be auto-filled.

    3. For Instance Details, enter a Virtual machine name. Virtual machines in Azure have two distinct names: the virtual machine name used as the Azure resource identifier, and a guest host name. When you create a VM in the portal, the same name is used for both the virtual machine name and the host name. The virtual machine name cannot be changed after the VM is created. However, you can change the host name when you log in to the virtual machine.

    4. From the Region drop-down menu, Choose an Azure region that is right for you and your customers. Not all virtual machine sizes are available in all regions.

    5. In Availability options select No infrastructure redundancy required.

    6. In Security type, select Standard.

    7. In Image, select Windows 10 Pro, version 22H2 - x64 Gen2.

    8. Under the VM architecture, Azure provides a choice of an x64 or Arm64-based virtual machine to run your applications. x64-based virtual machines provide the most software compatibility while Arm64-based virtual machines provide up to 50% better price-performance than comparable x64 virtual machines. Arm64-based virtual machines can also help you build Arm-compatible software without cross-compilation. x64 is the default.

    9. Azure Spot offers unused Azure capacity at a discounted rate versus the pay-as-you-go prices. Workloads should be tolerant to infrastructure loss as Azure could recall capacity for the pay-as-you-go workloads. You can choose to Run with Azure Spot discount.

    10. In Size, select the required size.

    11. The Enable Hibernation (preview) feature saves you time and money by deallocating your virtual machine and saving the contents of its RAM to the root volume, allowing you to resume from where you left off when your virtual machine restarts. After you have enabled the feature, an extension supporting this feature is automatically installed. You must register your subscription to enable Hibernation.

  5. Under the Administration account, do the following:

    1. Enter the administrator credentials Username and Password.

    2. Re-enter the password in Confirm password.

  6. Under Inbound port rules, do the following:

    1. In Public inbound ports, select one of the following:

      • None
      • Allow selected ports
    2. In Select inbound ports, select RDP(3389).
  7. Under Licensing, click the box to confirm your Windows eligibility.

  8. Click Next:Disks and configure the required settings on the Disks tab.

  9. Navigate to Networking. On the Networking tab, configure the following options:

    1. The Virtual network is auto-populated.

    2. In Subnet, select the select the newly created subnet. See To create a new subnet, follow these steps.

    3. Select or Create new a Public IP.

  10. Click Next: Review + create.

    Azure validates the configured settings and checks for errors before building the virtual machine.

  11. Click Create.

    1. Azure begins the deployment process and displays the Azure Dashboard page.

      You can click the Notifications icon at the top to display the Deployment in progress notification window, then click Deployment in progress to view the progress.

      When finished, the notification window displays Deployment succeeded.

To configure Azure Route table settings and associate the subnet

  1. In the Microsoft Azure Portal, go to Home > Route tables.
  2. Click + Create.

  3. Choose a name and the same Resource group and Location, both of which contain your NSv firewall and Windows VM.

  4. Click Review + Create.

  5. Review and agree to the legal terms and click Create.

  6. Go to Routes and click + Add and configure the following settings:

    1. Provide Route name.

    2. In the Destination type drop-down menu, select IP Addresses.

    3. In Destination IP addresses/CIDR ranges enter 0.0.0.0/0.

    4. In the Next hop type drop-down menu, select Virtual appliance.

    5. In Next hop address, enter a value, for example, 10.5.1.4.

    6. Click Add.

  7. Click Subnets and click + Associate.

  8. Find your custom subnet, and click OK to save it.