How to Deploy a CloudGen Firewall in Google Cloud Using the Command Line

To deploy a CloudGen Firewall with multiple network interfaces, see How to Deploy a CloudGen Firewall with Multiple NICs in Google Cloud Using the Command Line.

By using the gcloud command line tool included in the Google Cloud SDK, you can deploy a CloudGen Firewall with a single shell command. Deploying via command line allows you to deploy either the latest version from Google Launcher, or, by using the image name of a previous version, older firmware versions. Use the project and list of available images below to select which image to deploy.

Image project – barracuda-release
Images available – cudangfbyol-v720-158-20180117, cudangfhourly-v720-158-20180123, cudangfbyol-v711-056-hf844-hf846-20171004, c udangccbyol-v720-158-20171219

Before You Begin

Install the Google Cloud SDK. Alternatively, you can also use Google Cloud Shell instead.
Gather information needed for deployment:
- Name of the VPC network you plan to deploy to
- Name of the subnet you plan to deploy to
- Private IP address you want to assign to the new NGF instance
- Availability zone you will deploy to
Name of the CloudGen Firewall image. You can deploy either the latest image or a specific version from the listed versions above.

Deploy the Latest Version CloudGen Firewall Image

Use the gcloud command line tool to deploy the latest version of the CloudGen Firewall with a single network interface to your VPC:

gcloud compute instances create INSTANCE_NAME \
 --image-family barracuda-nextgen-firewall-f-series \
 --image-project barracuda-release \
 --project YOUR_PROJECT \
 --machine-type INSTANCE_TYPE \
 --network-interface network=NETWORK_NAME,subnet=SUBNET-NAME,private-network-ip=PRIVATE_IP_ADDRESS \
 --can-ip-forward \
 --tags ngfw \
 --zone ZONE

For example:

gcloud compute instances create my-first-ngfirewall --image-family barracuda-nextgen-firewall-f-series --image-project barracuda-release --project my-project --machine-type n1-standard-1 --network-interface network=default,subnet=default,private-network-ip=10.128.0.10 --can-ip-forward --tags ngfw --zone us-central1-b

Deploy a Specific CloudGen Firewall Image

Although only the latest version is visible in Google Launcher, it is possible to deploy older versions. Check the list at the beginning of the article for a list of available images.

gcloud compute instances create INSTANCE_NAME \
 --image IMAGE_NAME \
 --image-project barracuda-release \
 --project YOUR_PROJECT \
 --machine-type INSTANCE_TYPE \
 --network-interface network=NETWORK_NAME,subnet=SUBNET-NAME,private-network-ip=PRIVATE_IP_ADDRESS \
 --can-ip-forward \
 --tags ngfw \
 --zone ZONE

cudangfbyol-v711-056-hf843-hf844-20170926