Deploy UserGate VE in a VMware-based cloud

Last update: October 05 2026Open in Markdown

You can deploy a UserGate VE virtual firewall in a public or VMware-based private cloud.

1. Save the firewall image.
2. Create a vApp and virtual machine from the image.
3. Connect the virtual machine to the public subnet.
4. Assign an IP address to access the firewall.
5. Initialize the firewall.
6. Specify DNS and NTP servers.
7. Activate the license.

1. Save the firewall image

1. Go to the ticket that was created when ordering the firewall.
2. Save the firewall image to the device from which you will perform the configuration.

2. Create a vApp and virtual machine from the image

1. In the Control Panel, open the Cloud Director panel: in the top menu, click Products → VMware-based Cloud → the Cloud Director section.
2. Open the virtual data center page where you want to deploy the firewall.
3. Go to Compute → vApps.
4. Click NEW → Add vApp From OVF.
5. Upload the saved firewall image files.
6. In the Review Details section, check the image details.
7. Optional: in the Select vApp Name section, in the Name and Description fields, change the vApp name and description.
8. Optional: in the Configure Resources section, in the Computer Name field, change the virtual machine name.
9. Optional: in the Configure Resources section, in the Storage Policy field, change the network drive type.
10. In the Customize Hardware section, set the virtual machine configuration parameters, taking into account the configuration requirements.
11. Check the data and click Finish.
12. Wait for the creation of the virtual machine from the image to complete. The installation process will be displayed at the bottom of the page in the Tasks block.

3. Connect the virtual machine to a public subnet

1. Optional: if you do not have a Direct Connected subnet or want to use a new one, create a Direct Connected subnet.
2. In the Control Panel, open the Cloud Director panel: in the top menu, click Products → VMware-based Cloud → the Cloud Director section.
3. Open the virtual data center page → the Virtual Machines section.
4. Open the virtual machine page → the Hardware → NICs section.
5. Click Edit.
6. Click ADD NETWORK TO VAPP.
7. In the Type field, select Direct.
8. In the table, select the Direct Connected subnet.
9. Click Add.
10. Make sure that in the NIC 0 row, the Primary NIC and Connected checkboxes are selected.
11. In the NIC 0 row, in the Network column, select the same Direct Connected subnet.
12. In the NIC 0 row, in the IP column, specify an IP address from the Direct Connected subnet that is different from its gateway address.
13. Click Save.

4. Assign an IP address to access the firewall

UGOS 6

1. In the Control Panel, open the Cloud Director panel: in the top menu, click Products → VMware-based Cloud → the Cloud Director section.

2. Open the virtual data center page → the Virtual Machines section.

3. Open the virtual machine page.

4. Click POWER ON.

5. Click LAUNCH WEB CONSOLE.

6. Connect to the firewall:

   • login — Admin;
   • password — utm.

7. Switch the internet port to the static mode:

   iface config -name port0 -mode static

8. Assign an IP address to the port:

   iface config -name port0 -ipv4 <ip_address>/<mask>

   Specify:

   • <ip_address> — the IP address from the Direct Connected subnet that you assigned to the virtual machine when connecting to the public subnet in step 3;
   • <mask> — subnet mask.

9. Create a default route to the internet:

   gateway add -ipv4 <gateway> -weight 1 -enabled true -default true

   Specify <gateway> — the gateway of the Direct Connected subnet. The gateway address can be viewed in the Control Panel: in the top menu, click Products → VMware-based Cloud → data center page → the Direct Connected subnets tab → the Gateway field.

UGOS 7

1. In the Control Panel, open the Cloud Director panel: in the top menu, click Products → VMware-based Cloud → the Cloud Director section.

2. Open the virtual data center page → the Virtual Machines section.

3. Open the virtual machine page.

4. Click POWER ON.

5. Click LAUNCH WEB CONSOLE.

6. Select UGOS NGFW (serial console) mode.

7. Connect to the firewall:

   • login — Admin;
   • password — leave the field empty.

8. Go to configuration mode:

   configure

9. Assign an IP address to the internet port:

   set network interface adapter port0 ip-addresses [ <ip_address>/<mask> ]

   Specify:

   • <ip_address> — the address from the Direct Connected subnet that you assigned to the virtual machine when connecting to the public network in step 3.
   • <mask> — subnet mask.

   Square brackets [ ] must be separated by spaces on both sides.

10. Create a default route to the internet:

    create network gateway interface port0 enabled on ip <gateway> weight 1 default on

    Specify <gateway> — the gateway of the Direct Connected subnet. The gateway address can be viewed in the Control Panel: in the top menu, click Products → VMware-based Cloud → data center page → the Direct Connected subnets tab → the Gateway field.

UGOS 7.1 and higher

1. In the Control Panel, open the Cloud Director panel: in the top menu, click Products → VMware-based Cloud → the Cloud Director section.

2. Open the virtual data center page → the Virtual Machines section.

3. Open the virtual machine page.

4. Click POWER ON.

5. Click LAUNCH WEB CONSOLE.

6. Select UGOS NGFW (serial console) mode.

7. Connect to the firewall:

   • login — Admin;
   • password — usergate.

8. Go to configuration mode:

   configure

9. Assign an IP address to the internet port:

   set network interface adapter port0 ip-addresses [ <ip_address>/<mask> ]

   Specify:

   • <ip_address> — the address from the Direct Connected subnet that you assigned to the virtual machine when connecting to the public network in step 3;
   • <mask> — subnet mask.

   Square brackets [ ] must be separated by spaces on both sides.

10. Create a default route to the internet:

    create network gateway interface port0 enabled on ip <gateway> weight 1 default on

    Specify <gateway> — the gateway of the Direct Connected subnet. The gateway address can be viewed in the Control Panel: in the top menu, click Products → VMware-based Cloud → data center page → the Direct Connected subnets tab → the Gateway field.

5. Initialize the firewall

1. Open the page in your browser:

   https://<ip_address>:8001

   Specify <ip_address> — the IP address that you assigned to access the firewall in step 4.

2. Go to Settings.

3. Select the system language.

4. Select the time zone.

5. Accept the license agreement.

6. Change the administrator password.

7. Wait for the installation procedure to complete.

6. Specify DNS and NTP servers

1. Open the page in your browser:

   https://<ip_address>:8001

   Specify <ip_address> — the IP address that you assigned to access the firewall in step 4.

2. Go to Settings → Network → DNS.

3. Click Add.

4. Specify the IP addresses of the DNS servers. We recommend using Selectel recursive DNS servers, but you can specify any available DNS servers.

5. Click Save.

6. Go to Settings → Network → NTP.

7. Click Add.

8. Specify the IP addresses of the NTP servers. We recommend using Selectel NTP servers, but you can specify any available NTP servers.

9. Click Save.

7. Activate the license

UGOS 6

1. Open the page in your browser:

   https://<ip_address>:8001

   Specify <ip_address> — the IP address that you assigned to access the firewall in step 4.

2. Go to License Information → Registered Version.

3. Enter the PIN received in the ticket when ordering the firewall.

4. Click Next.

5. Fill out the registration form. We recommend using the same data as in your Selectel account.

6. Click Next.

7. Wait for the device registration to complete. Information about the license details and component expiration dates will be displayed in the License Information section.

UGOS 7 and higher

1. Open the page in your browser:

   https://<ip_address>:8001

   Specify <ip_address> — the IP address that you assigned to access the firewall in step 4.

2. Go to License Information → Registered Version.

3. Enter the PIN received in the ticket when ordering the firewall.

4. Click Next.

5. Wait for the device registration to complete. Information about the license details and component expiration dates will be displayed in the License Information section.