Before you deploy a new firewall, you can create and configure all necessary settings on the Control Center. Then, deploy the PAR file to the firewall.

Step 1. Create a New / Clone an Existing CloudGen Firewall Configuration in the Control Center

Step 1. Option 1. Create a New CloudGen Firewall Configuration in the Control Center

Create a box in the Control Center. If you want to add a firewall with similar settings as a box that already exists on your Control Center, you can also clone the configuration.

To create a new CloudGen Firewall configuration:

1. Expand the Boxes node (CONFIGURATION > Configuration Tree > Multi-Range > your range > your cluster).

2. Right-click Boxes and select Create Box Wizard.

   Open

   

   
   The Wizard window opens.

3. Enter all settings requested by the Create Box Wizard.

4. Click Finish.

5. Click Activate.

Step 1. Option 2. Clone an Existing CloudGen Firewall Configuration in the Control Center

When cloning a box, the following 3 fields in the Wizard window are considered:

• Box to clone – Example: MySourceBox_C1_R1

• Naming Replace From – MySourceBox

• Naming Replace To – MyClonedBox

The new name of the cloned box will therefore be MyClonedBox_C1_R1, because MyClonedBox completely replaces the name MySourceBox in the string MySourceBox_C1_R1 in the field BoxToClone.

To clone a CloudGen Firewall box, perform the following steps:

1. Expand the Boxes node (CONFIGURATION > Configuration Tree > Multi-Range > your range > your cluster).

2. Right-click the box you wish to clone and select Clone Box Wizard.
   

   
   The Wizard window opens.

3. Enter the name of the new box in the Naming Replace From field.

4. Enter the name of the new box in the Naming Replace To field.

5. In the Management IP field, enter the IP address of the new box.
   

6. Adjust all settings according to your requirements.

7. Click Finish.

8. Click Activate.

Step 2. (optional) Configure the Remote Management Tunnel

If your firewall cannot directly access the Control Center, configure a remote management tunnel. For more information, see How to Configure a Remote Management Tunnel for a CloudGen Firewall.

Step 3. Activate the CloudGen Firewall Configuration

Imported firewalls are disabled per default. Disabled CloudGen Firewalls are represented by a gray status icon.

1. Open the Box Properties page for the CloudGen Firewall (CONFIGURATION > Configuration Tree > Multi-Range > your range > your cluster > your CloudGen Firewall).

2. In the left menu, click Operational.

3. Set Disable Box to no.

4. Click Send Changes and Activate.

The status of the CloudGen Firewall on the Status Map (CONTROL > Status Map) now changes from gray (offline) to red with dashes (unreachable).

Step 4. Deploy the PAR file to the CloudGen Firewall 

Deploy the configuration of the new CloudGen Firewall to the remote CloudGen Firewall.

Step 4.1 Create the PAR file on the Control Center

1. Log into the Control Center.

2. Expand the node for the firewall you imported in Step 2.

3. Right-click the box name and select Create PAR file for box.

4. Choose the destination folder and click Save. 

Step 4.2. Import the PAR on the CloudGen Firewall

1. Log into your firewall.

2. Go to CONFIGURATION > Configuration Tree > Multi-Range > your range > your cluster > your CloudGen Firewall.

3. Right-click the Box node and select Restore from PAR file.

4. Click OK. 

5. Select the PAR file created in Step 4.1. and click Open.

6. Click Activate.

Step 4.3. Activate the Network Configuration

1. Go to CONTROL > Box.

2. In the left menu, expand the Network section.

3. Click Activate new network configuration.

4. In the dialog window, click Failsafe.

5. In the left menu, expand Operating Systems and click Firmware Restart.

6. Click YES. The firmware of the CloudGen Firewall restarts.

The status of the CloudGen Firewall is now green, red, or yellow. It can take a couple of minutes for the remote firewall to initiate a management tunnel.