Deploy the VM-Series Firewall on Cisco ENCS

Deploy the VM-Series firewall.
In Enterprise NFVIS, click

VM Life Cycle

Deploy

.

Drag the firewall icon to the appropriate network. In this example, the firewall connects to a management network and a LAN network.



Deploy

the VM-Series firewall.

If you are using Panorama to manage the firewall, the firewall displays as

Connected

on

Panorama

Managed Devices

Summary

. If the firewall is not connected to Panorama, check that you have provided the correct Panorama IP address and that the devices can communicate over the network.


Configure the VM-Series firewall dataplane interfaces.
See configure a Layer 3 interface, configure a Layer 2 interface, or configure virtual wires. If using Panorama, the following steps show you how to configure the firewall for a Layer 3 deployment.
Add a template and assign the firewall to the template.

Select the

Network

and in the Template drop-down, select the template you created.

Select

Network

Interfaces

Ethernet

.

Click

ethernet 1/1

and configure as follows:

Set
Interface Type
to
Layer3
.
On the
Config
tab, assign the interface to the default router.
Also on the
Config
tab, expand the
Security Zone
drop-down and select
New Zone
. Define a new zone called
UnTrust
for example, and then click
OK
.
On the
IPv4
tab, select
DHCP Client
or
Static
. If you choose static, enter the IP address.



Repeat b-e for each network interface.

Commit

Commit and Push

to commit all configuration changes to Panorama and the managed firewalls.

Verify that the link state for the firewall interfaces is up.


Configure Security policies to safely enable applications and users on your network.
If using Panorama, the following steps show you how to use device groups to centrally manage policy rules for your managed firewalls.
Add a device group and assign the managed firewalls to your device group.

Configure the security policies for the device group.
Verify that the VM-Series firewall is securing traffic on your network.