Software Secure Firewall Threat Defense
Platform Secure Firewall Threat Defense Virtual
Activity Onboard

Deploy Cluster Nodes Manually - GWLB-based Deployment

Deploy the cluster nodes so they form a cluster.

Procedure

1

Create a Virtual Machine Scale Set from the Marketplace image with 0 instance count using the az vmss create CLI.

az vmss create --resource-group <ResourceGroupName> --name <VMSSName> --vm-sku <InstanceSize> --image <FTDvImage> --instance-count 0 --admin-username <AdminUserName> --admin-password <AdminPassword> --plan-name <ftdv-azure-byol/ftdv-azure-payg> --plan-publisher cisco --plan-product cisco-ftdv --plan-promotion-code <ftdv-azure-byol/ftdv-azure-payg> --vnet-name <VirtualNetworkName> --subnet <MgmtSubnetName>

2

Attach three interfaces—Diagnostic, Data, and Cluster Control Link.

3

Go to the virtual machine scale set you have created and perform the following steps:

  1. Under the Operating system section, add the day 0 configuration in the customData field.

  2. Click Save.

  3. Under the Scaling section, update the instance count with the required cluster node. You can set the instance count range of minimum 1 and maximum 16.

4

Configure the Azure Gateway Load Balancer. See Auto Scale with Azure Gateway Load Balancer Use Case for more information.

5

Add the control node to the Firewall Management Center. See Add the Cluster to the Management Center (Manual Deployment).