Security Gateway Phau Ntawv Qhia
Microsoft Azure

PfSense® Plus Firewall/VPN/Router rau Microsoft Azure yog lub xeev firewall, VPN, thiab cov khoom siv ruaj ntseg. Nws yog qhov tsim nyog siv los ua qhov kawg ntawm VPN ob qho tib si rau qhov chaw-rau-site VPN tunnels thiab ua chaw taws teeb nkag VPN server rau cov khoom siv mobile. Native firewall functionality muaj xws li muaj ntau yam ntxiv xws li bandwidth shaping, intrusion detection, proxying, thiab ntau ntxiv ntawm pob. pfSense Plus rau Azure muaj nyob hauv Azure Marketplace.

THOV KOM TAU

1.1 Launching Instance nrog ib qho NIC
Ib qho piv txwv ntawmNetgate® pfSense® Plus rau Azure uas yog tsim nrog ib qho NIC tuaj yeem siv los ua VPN kawg kom tso cai nkag mus rau Azure Virtual Network (VNet). NIC pfSense ib leeg
Ntxiv rau lub tshuab virtual (VM) tsuas yog tsim WAN interface, tab sis tseem muab pej xeem thiab ntiag tug IP hauv Azure.
Hauv Azure Management Portal, tso ib qho piv txwv tshiab ntawm Netgate pfSense® Plus Firewall/VPN/Router appliance.

1. Los ntawm Azure portal Dashboard, nyem rau ntawm Marketplace.
2. Nrhiav rau thiab xaiv Netgate Appliance rau Azure.
3. Teem lub npe ntawm qhov piv txwv nrog rau tus neeg siv lub npe, tus password, pab pawg neeg, thiab cheeb tsam.
   Tus neeg siv lub npe nkag yuav raug tsim raws li siv tau pfSense Plus tus account thaum khau raj thiab yuav tuaj yeem nkag mus rau hauv web GUI. Tsis tas li ntawd, tus neeg siv admin kuj yuav muaj nws tus password teem rau tus nqi uas tau nkag mus.
   Ceeb toom: Tus neeg siv lub npe feem ntau siv los tswj hwm pfSense Plus yog admin, tab sis admin yog lub npe tshwj tseg uas tsis tso cai los ntawm Azure provisioning wizard. Tsis tas li ntawd rau huab kev ruaj ntseg, nws yog suav hais tias yog qhov zoo tshaj plaws xyaum los txwv kev nkag mus rau cov neeg siv hauv paus, yog li cov hauv paus hniav raug kaw los ntawm lub neej ntawd.
4. hoose qhov piv txwv loj.
5. Xaiv hom disc, thiab teeb tsa network (virtual network, subnet, pej xeem IP chaw nyob, pab pawg kev ruaj ntseg network).
   Txhawm rau tswj hwm Netgate pfSense ® Plus cov cuab yeej, koj yuav tsum xyuas kom meej tias pawg kev ruaj ntseg muaj cov cai tso cai rau cov chaw nres nkoj 22 (SSH) thiab 443 (HTTPS) kom nkag mus rau cov kab hais kom ua thiab Web GUI. Yog tias koj npaj yuav tso cai rau lwm cov tsheb, ntxiv cov ntsiab lus kawg ntxiv.
   Rau IPsec, tso cai UDP port 500 (IKE) thiab UDP port 4500 (NAT-T).
   Rau OpenVPN, tso cai UDP chaw nres nkoj 1194.
   Nyem rau Network kev ruaj ntseg pab pawg thiab ua ntxiv raws li xav tau.
6. Txheeb xyuas koj cov kev xaiv ntawm nplooj ntawv Summary thiab nyem OK.
7. Nco ntsoov tus nqi ntawm nplooj ntawv yuav khoom thiab nyem Purchase.
8. Thaum VM tso tawm thiab Azure portal qhia tias nws tau los, koj tuaj yeem nkag mus rau web interface. Siv tus password koj teev thaum lub sijhawm muab cov txheej txheem thiab tus neeg siv admin. Tam sim no koj yuav tsum tau nkag mus rau lub cuab yeej.

1.2 Launching ib qho piv txwv nrog ntau lub network interfaces.

Ib qho piv txwv ntawm Netgate® pfSense® Plus rau Azure uas muaj ntau yam NICs uas yuav tsum tau siv los ua phab ntsa lossis lub rooj vag tsis tuaj yeem muab rau hauv Azure portal webqhov chaw. Txhawm rau muab ib qho piv txwv nrog ntau lub network sib cuam tshuam, koj yuav tsum siv PowerShell, Azure CLI, lossis tus qauv ARM los ua cov haujlwm xav tau.
Cov txheej txheem no tau sau tseg hauv Microsoft cov ntaub ntawv azure. Qee qhov txuas uas qhia txog cov txheej txheem no:

• Deploy nrog PowerShell nyob rau hauv lub classic deployment qauv
• Deploy nrog PowerShell nyob rau hauv lub Resource Manager deployment qauv
• Xa nrog Azure CLI raws li Tus Thawj Saib Xyuas Kev Pabcuam xa tawm qauv
• Tso nrog cov qauv hauv qab Tus Thawj Saib Xyuas Kev Siv Khoom xa tawm qauv

1.3 Txhawb rau Azure Boot Diagnostics Extension.

Azure Boot Diagnostics txuas ntxiv yuav tsis ua haujlwm zoo nrog Netgate® pfSense ® Plus software rau cov khoom siv Azure.
Cov teeb meem raug tshaj tawm nrog rau qhov kev ua haujlwm no thaum lub sijhawm kuaj ntawv pov thawj ntawm cov khoom siv. Kev sim tom ntej tau qhia tias nws tshwm sim ua haujlwm nyob rau qee qhov xwm txheej. Koj muaj kev ywj pheej los sim ua kom khau raj kuaj mob, tab sis nws tsis yog kev txhawb nqa.
Yog li, thov tsis txhob pib hu xov tooj lossis daim pib yog tias koj pom tias Boot Diagnostics txuas ntxiv ua haujlwm tsis zoo nrog koj Netgate pfSense ®
Ntxiv rau Azure VM. Qhov no yog ib qho kev txwv paub thiab tsis muaj kev kho mob los ntawm
Azure pab neeg txhawb nqa cov neeg siv khoom lossis Netgate's.

2.1 Kev Lag Luam Hauv Cheeb Tsam Muaj

Cov lus hauv qab no qhia txog qhov muaj tam sim no los ntawm kev lag luam hauv cheeb tsam. Yog tias qhov xav tau kev lag luam hauv cheeb tsam tsis tau teev tseg, xa mus rau Microsoft Regions muaj lossis xa daim pib them nyiaj ncaj qha rau Microsoft Azure.

Rooj 1: Microsoft Azure Available Regions

Kev ua lag luam	pfSense Plus
Armenia	Muaj
Australia	*
Austria	Muaj
Belarus	Muaj
Belgium	Muaj
Brazil	Muaj
Canada	Muaj
Croatia	Muaj
Cyprus	Muaj
Czechia	Muaj
Denmark	Muaj
Estonia	Muaj
Finland	Muaj
Fabkis	Muaj
Lub teb chaws Yelemees	Muaj
tim Nkij teb chaws	Muaj
Hungary	Muaj
Is Nrias teb	Muaj
Ireland	Muaj
Ltalis	Muaj
Kauslim	Muaj
Latvia	Muaj
Liechtenstein	Muaj
Lithuania	Muaj
Luxembourg	Muaj
Malta	Muaj
Monaco	Muaj
Netherlands	Muaj
New Zealand	Muaj
Norway	Muaj

Table 1 - txuas ntxiv los ntawm nplooj ntawv dhau los.

Kev ua lag luam	pfSense Plus
Poland	Muaj
Portugal	Muaj
Puerto Rico	Muaj
Romania	Muaj
Russia	Muaj
Saudi Arabia	Muaj
Serbia	Muaj
Slovakia	Muaj
Slovenia	Muaj
South Africa	Muaj
Spain	Muaj
Sweden	Muaj
Switzerland	Muaj
Taiwan	Muaj
Qaib ntxhw	Muaj
United Arab Emirates	Muaj
United Kingdom	Muaj
Tebchaws Meskas	Muaj

* Australia yog Microsoft Lub Tebchaws Tswjhwm rau kev muag khoom los ntawm txhua qhov kev yuav khoom ntawm cov neeg siv khoom tshwj tsis yog Daim Ntawv Pom Zoo Kev Lag Luam Cov neeg siv khoom yuav khoom.

2.2 Cov lus nug nquag

2.2.11. Kuv puas yuav tsum teeb tus password lossis siv tus yuam sij SSH thaum Azure tus neeg siv muab?

Nws raug nquahu kom teeb tus password. Qhov no yuav tso cai rau nkag mus rau lub WebGUI, qhov tseem ceeb SSH tsuas yog tso cai rau koj nkag mus rau SSH cov lus txib kom sai. Feem ntau cov khoom teeb tsa hauv Netgate® pfSense ® Plus software feem ntau yog tswj hwm los ntawm WebGUI. Yog tias koj siv tus yuam sij SSH yuam kev, koj tuaj yeem xaiv qhov kev xaiv los pib dua tus password admin ntawm cov ntawv qhia zaub mov uas tshwm thaum koj ssh rau koj qhov piv txwv. Ces tus WebGUI lo lus zais yuav rov pib dua rau "pfsense". Koj yuav tsum tau hloov kho tus password admin tam sim ntawd rau tus nqi ruaj ntseg dua thaum koj tau nkag mus rau hauv qhov zoo WebGUI.

2.2.22. Puas yog qhov hloov tshiab nyob ntawm software txhawb?

Versions nyob rau hauv 2.2.x ntau yam yuav tsum tsis txhob sim kom muaj ib tug firmware txawj tej yam ntxiv executed. Nyob rau hauv lub neej yav tom ntej (pfSense 2.3 los yog tom qab), qhov no tej zaum yuav ua tau, tab sis nws yog tam sim no untested thiab unsupported. Txij li thaum lub console tiag tiag tsis muaj, cov txheej txheem rov qab zoo rau kev ua tsis tiav thaum hloov kho tshiab yuav nyuaj rau kev txhais. Cov txheej txheem tam sim no tau pom zoo rau kev hloov kho tshiab yog txhawm rau thaub qab pfSense ® Plus configg los ntawm cov piv txwv uas twb muaj lawm thiab rov qab kho nws ntawm qhov piv txwv tshiab thaum muaj kev hloov kho tshiab.

2.3 Txhawb Kev Pabcuam

2.3.1 Kev Txhawb Kev Lag Luam

Txhawm rau kom tus nqi qis, cov software tsis tau ntim nrog kev txhawb nqa. Rau cov neeg siv uas xav tau kev txhawb nqa kev lag luam, Netgate® Kev Pabcuam Ntiaj Teb tuaj yeem yuav ntawm https://www.netgate.com/support.
2.3.2 Kev Pabcuam Hauv Zej Zog
Kev txhawb nqa zej zog muaj nyob hauv Newgate Forum.

2.4 Cov peev txheej ntxiv

2.4.1Netgate Kev cob qhia

Netgate kev cob qhia muaj cov kev cob qhia rau kev nce koj cov kev paub ntawm pfSense ® Plus cov khoom thiab cov kev pabcuam. Txawm hais tias koj yuav tsum tswj lossis txhim kho kev ruaj ntseg ntawm koj cov neeg ua haujlwm lossis muab kev txhawb nqa tshwj xeeb thiab txhim kho koj cov neeg siv khoom txaus siab; Netgate kev cob qhia tau pab koj.
https://www.netgate.com/training

2.4.2Resource Library

Txhawm rau kawm paub ntxiv txog kev siv koj cov cuab yeej Netgate thiab rau lwm yam kev pab cuam, nco ntsoov mus saib peb Lub Tsev Qiv Ntawv.
https://www.netgate.com/resources

2.4.3 Kev Pabcuam Kev Ua Haujlwm

Kev them nyiaj yug tsis suav nrog ntau txoj haujlwm nyuaj xws li CARP teeb tsa rau kev rov ua dua ntawm ntau lub pob hluav taws xob lossis circuits, kev tsim network, thiab hloov pauv los ntawm lwm cov firewalls rau pfSense ® Plus software. Cov khoom no tau muab los ua cov kev pabcuam tshaj lij thiab tuaj yeem yuav thiab teem sijhawm raws li.
https://www.netgate.com/our-ervices/professional-services.html

2.4.4 Kev xaiv hauv zej zog

Yog tias koj xaiv tsis tau txais kev pab them nqi kho mob, koj tuaj yeem nrhiav kev pab los ntawm lub zej zog pfSense uas muaj zog thiab paub txog ntawm peb lub rooj sab laj.
https://forum.netgate.com/

Cov ntaub ntawv / Cov ntaub ntawv

netgate pfSense Plus Firewall / VPN / Router rau Microsoft Azure [ua pdf] Tus neeg siv phau ntawv Microsoft Azure, Security Gateway, Microsoft Azure Security Gateway, pfSense Plus Firewall VPN Router rau Microsoft Azure, pfSense Plus Firewall VPN Router

Cov ntaub ntawv

• Cov neeg siv phau ntawv