13.3. Placing UserGate Devices under UGMC Management

Step 1. Enable access to UGMC from the MDs.

On the UGMC server, allow the UserGate Management Center service in the zone to which the MDs are connected. The UGMC server listens for MD connections on TCP ports 2022 and 9712.

Data transfer between the UGMC server and MDs occurs over an encrypted data link.

Step 2. Create an MD object.

In the NGFW management --> NGFW devices section of the realm management console, click Add and provide the desired settings.

Step 3. Link the MD object just created to a real UserGate NGFW device.

In the UserGate NGFW management console, set up the link between UGMC and the device. This can be done during the initial configuration of a UserGate NGFW or on an already configured NGFW. Both options are described in detail later in this chapter.

Enabled

Enables the MD object. When enabled, the MD object takes up one license.

Name

The name of the MD. The name can be arbitrary.

Description

A description of the MD.

Templates group

The templates group whose settings should be applied to this MD.

Sync mode

Select the mode used to synchronize the template group settings with the device. There are three options:

• Auto sync: the settings are applied to the device automatically. A change to any setting in any template of the template group applied to the MD is propagated immediately to the device.

• Disabled: sync mode is disabled.

• Manual sync: in this sync mode the settings are applied on clicking the Schedule sync button. This option is useful when many template settings need to be changed and applied to the device at once. In this case, you need to disable synchronization, make the desired changes to the templates, and then enable the Manual sync mode.

Regardless of the selected mode, it is possible to start synchronization of all settings for selected devices (click Actions --> Run full resync now in the NGFW management --> NGFW devices section).

Step 1. Copy the device code.

In UGMC, select the MD object you created and click Actions --> Show device unique code. Copy the code to the clipboard.

Step 2. During the initial setup of the NGFW, select installation using UGMC.

During the initial setup, at the step where the administrator login and password are set, select the link Configure by UserGate Management Center.

Step 3. Provide the desired settings for the new node and enter the unique device code.

Specify the following settings:

• The network settings for this UserGate NGFW (IP address, subnet mask, gateway). These settings will be applied to the specified interface. After configuring the network settings, the UGMC server must become accessible over the network from this NGFW.

• The name and password for a local administrator.

• The IP address of the UGMC server and the unique device code saved at the first step.

Step 4. Check the connection.

After connecting to UGMC, the UserGate NGFW should receive all settings prepared for it in UGMC. In the NGFW, these settings are displayed with a lock icon, meaning that a local administrator cannot change them.

In the UGMC console, the MD object will display additional information on the connected device, such as PIN code, serial number, license information, RAM usage, etc.

Step 1. Copy the device code.

In UGMC, select the MD object you created and click Actions --> Show device unique code. Copy the code to the clipboard.

Step 2. Specify the IP address of the UGMC server and enter the unique device code.

In the General settings --> Management center agent, select Configure, specify the IP address of the UGMC server, paste the unique device code, and enable this connection. The UGMC server must be accessible over the network from this NGFW for a successful completion of this step.

Step 3. Check the connection.

After connecting to UGMC, the UserGate NGFW should receive all settings prepared for it in UGMC. In the NGFW, these settings are displayed with a lock icon, meaning that a local administrator cannot change them.

In the UGMC console, the MD object will display additional information on the connected device, such as PIN code, serial number, license information, RAM usage, etc.

View advanced MD state information

In the UGMC console, select the MD object and click Show device details. The following information about the connected MD will be displayed:

• MD software version.

• MD PIN code.

• HSC serial number.

• Device uptime.

• Device load metrics such as CPU load, RAM usage, swap usage, and the number of users connected via the MD.

Connect to the MD console

In the UGMC console, select the MD object and click Actions --> Open console. The UserGate NGFW console will open in a new window.

Modify settings

In the UGMC console, modify the settings of a template from the template group applied to the MD. The new settings will be applied to the UserGate NGFW.