Onboard Versa Cloud NGFW (SaaS) Service License on AWS
This section describes how to onboard a Versa instance on AWS after you subscribe to Versa Cloud NGFW (SaaS).
Before you begin, to launch the AWS stack, you must locate or create a key pair in the region where the service is running. If you do not have a key pair, you can generate it by logging in to the AWS console as the AWS admin user.
Process to Onboard Versa Cloud NGFW (SaaS) Service License on AWS
To onboard a Versa instance, you must perform the following tasks:
Add and Deploy the License
To add and deploy the license:
- Log in to Versa Portal using the Versa Cloud NGFW (SaaS) subscription account created from AWS Marketplace.
- Enter the username and password, and then click Log In.
- In the Versa Portal dashboard, click Onboarding in the left menu bar, and then click Step 1, Add License and Deploy.
- In the Add License screen, enter information for the following fields.
Fields Description Virtual Instance Name (Required) Enter the name of the instance. AWS Account ID (Required) Select the AWS account ID that is generated when subscribing to Versa Cloud NGFW (SaaS). If more than one account in the same organization is used, select the account ID from the list. AWS Region (Required) Select the region to deploy the service in AWS. License Type (Required) Select NextGen Firewall. The license types listed depend on the service subscription. Number of Core (Required) Select the number of cores:
- 4 core
- 8 core
- 16 core
License Tier (Required) For NextGen firewall, select Professional.
Template Select the configuration template. Remote Access VPN Slide the toggle to enable or disable remote access VPN. Note that remote access VPN selection is optional, and if enabled, it is subject to pricing.
To configure remote access VPN, see Configure Secure Access Service (Remote Access VPN).
Pricing Reference Displays the AWS pricing details. Pricing is subject to change without notice. Check the AWS product page for the latest pricing. The billing cycle starts after the license activation and stops when the license is unsubscribed in AWS Marketplace.
Site Description Enter a text description for the site. The description can be a maximum of 128 characters. - Click Deploy.
Launch a Cloud Formation Template
You use AWS cloud formation templates to deploy a set of AWS resources. A cloud formation template is a simple text file that describes a stack, which is a collection of AWS resources that you want to deploy together as a group. When you launch a stack, the Versa Networks infrastructure described in the template is provisioned. Placing all the cloud resources in a single stack allows you to manage them together as a group instead of having to manage the individual resources.
To launch a cloud formation template:
- Log in to Versa Portal using the Versa Cloud NGFW (SaaS) subscription account created from AWS Marketplace.
- Enter the username and password, and click Log In.
- In the Versa Portal dashboard, click Onboarding in the left menu bar, and then Click Step 2, Launch Cloud Formation Template.
- In the Cloud Formation Template screen, find the instance name and click Launch.
- Click Yes to create the stack on AWS.
The Quick Create Stack page opens in AWS Marketplace with the information pre-populated based on the Versa Portal configuration. It is recommended that you do not change any configuration on the Quick Create Stack page. - In the Amazon EC2 Parameters section, select a key pair to use to login to the instances, and then click Create Stack.
- The Cloud Formation Stack Details page displays the stack creation status.
You can view the activation task in the Tasks (In Progress) popup window on the Versa Portal dashboard. Click View More to see the task details.
- In the left navigation bar, select AWS Portal >EC2 > Instances > Instance to check the instance created.
To download a Cloud Formation Template:
- In the Versa Portal dashboard, click Onboarding in the left menu bar, and then Click Step 2, Launch Cloud Formation Template.
- In the Cloud Formation Template popup screen, find the device name and click the download icon.
- Save the JSON file.