There are two ways to deploy vNGAF for tenants. One is for the SCP administrator to deploy it for the tenant through the SCP administrator portal (https://SCP-IP:4430). The other is for the tenant to deploy it by logging into their own portal (https://SCP-IP).

VPC vNGAF deployment will cause gateway disconnection for a short time. Please perform this operation during off-peak hours.

Prerequisite:

1. The SCP administrator has allocated the vNGAF quota to the tenant.
2. The super administrator has uploaded the vNGAF image.
3. SCP has enabled vNGAF and aNET licenses.[SZ1]

Step

For SCP administrator account login SCP go to Networking > Topology on the up-left corner select the VPC, locate the vNGAF click Activate button. For tenant login SCP go to Networking > Topology locate the vNGAF click Activate button. The following steps both SCP administrator and tenant are the same.

After clicking Activate button fill out the following configuration:

• Name: By clicking the Edit button, you can define the vNGAF name.

• Resource Pool: The resource pool to deploy vNGAF.

• VPC: The resource pool to deploy vNGAF.

• Automatic Bypass: Monitor the status of the vNGAF and automatically allow business traffic to bypass the firewall when an error is detected, ensuring normal communication for VPC. After the troubleshooting is completed, you need to enable protection manually.

Configuration: Select the vNGAF configuration.

Branch VPN Sites: IPsec VPN site number.

Mobile Users: IPsec VPN client.

Under the more button there are Anti Web Defacement Licenses and SSL VPN Users.

Anti Web Defacement Licenses: Define the quantity interface for vNGAF.

SSL VPN Users: Define the quantity interface for the vNGAF.

Click OK, waiting for the vNGAF created successfully.

After successfully creating, you can view the device status information from the list. Click Edit to edit the configuration and device name. Click Web Console to redirect to the vNGAF console, click Start Protection enable protection. Under the More button, click Disable Protection to stop device protection. Click to enable storage encryption. Enable storage Encryption: Enabling the storage encryption feature means enabling encryption protection for the system disk of the vNGAF virtual machine. The encryption algorithm used is AES-256, and the encryption mode is ECB. After this feature is enabled, the data on the vNGAF virtual machine’s system disk is stored in an encrypted state, which effectively prevents data leakage caused by unauthorized access to the disk.