Deploy UserGate VE in a VMware-based cloud

Last update: May 30 2026

You can deploy the UserGate VE virtual firewall in a public or private VMware-based cloud.

1. Save the firewall image.
2. Create a vApp and virtual machine from the image.
3. Connect the virtual machine to a public subnet.
4. Assign an IP address to access the firewall.
5. Initialize the firewall.
6. Specify DNS and NTP servers.
7. Activate the license.

1. Save the firewall image

1. Go to the ticket that was created when ordering the firewall.
2. Save the firewall image to the device from which you will perform the configuration.

2. Create a vApp and virtual machine from the image

1. From the control panel, open the Cloud Director panel: in the top menu, click Products → VMware-based cloud → Cloud Director.
2. Open the virtual data center page where you want to deploy the firewall.
3. Go to the Compute → vApps.
4. Click NEW → Add vApp From OVF.
5. Upload the saved firewall image files.
6. In the Review Details section, verify the image details.
7. Optional: in the Select vApp Name section, in the Name and Description fields, change the vApp name and description.
8. Optional: in the Configure Resources section, in the Computer Name field, change the virtual machine name.
9. Optional: in the Configure Resources section, in the Storage Policy field, change the network volume type.
10. In the Customize Hardware section, set the virtual machine configuration parameters, taking into account the configuration requirements.
11. Check the details and click Finish.
12. Wait for the virtual machine creation from the image to complete. The installation process will appear at the bottom of the page in the Tasks.

3. Connect the virtual machine to a public subnet

1. Optional: if you do not have a Direct Connected subnet or you want to use a new one, create a Direct Connected subnet.
2. From the control panel, open the Cloud Director panel: in the top menu, click Products → VMware-based cloud → Cloud Director.
3. Open the virtual data center page → Virtual Machines.
4. Open the virtual machine page → Hardware → NICs.
5. Click Edit.
6. Click ADD NETWORK TO VAPP.
7. In the Type field, select Direct.
8. In the table, select the Direct Connected subnet.
9. Click Add.
10. Make sure that in the NIC 0 row, the Primary NIC and Connected checkboxes are selected.
11. In the NIC 0 row, in the Network column, select the same Direct Connected subnet.
12. In the NIC 0 row, in the IP column, specify an IP address from the Direct Connected subnet, other than its gateway address.
13. Click Save.

4. Assign an IP address to access the firewall

UGOS 6

1. From the control panel, open the Cloud Director panel: in the top menu, click Products → VMware-based cloud → Cloud Director.

2. Open the virtual data center page → Virtual Machines.

3. Open the virtual machine page.

4. Click POWER ON.

5. Click LAUNCH WEB CONSOLE.

6. Connect to the firewall:

   • login — Admin;
   • password — utm.

7. Switch the internet port to static mode:

   iface config -name port0 -mode static

8. Assign an IP address to the port:

   iface config -name port0 -ipv4 <ip_address>/<mask>

   Specify:

   • <ip_address> — IP address from the Direct Connected subnet that you assigned to the virtual machine when connecting to the public subnet in step 3;
   • <mask> — subnet mask.

9. Create a default route to the internet:

   gateway add -ipv4 <gateway> -weight 1 -enabled true -default true

   Specify <gateway> — gateway of the Direct Connected subnet. You can find the gateway address in the control panel: in the top menu, click Products → VMware-based cloud → data center page → Direct Connected subnets tab → Gateway.

UGOS 7

1. From the control panel, open the Cloud Director panel: in the top menu, click Products → VMware-based cloud → Cloud Director.

2. Open the virtual data center page → Virtual Machines.

3. Open the virtual machine page.

4. Click POWER ON.

5. Click LAUNCH WEB CONSOLE.

6. Select the UGOS NGFW (serial console) mode.

7. Connect to the firewall:

   • login — Admin;
   • password — leave the field empty.

8. Go to configuration mode:

   configure

9. Assign an IP address to the internet port:

   set network interface adapter port0 ip-addresses [ <ip_address>/<mask> ]

   Specify:

   • <ip_address> — address from the Direct Connected subnet that you assigned to the virtual machine when connecting to the public subnet in step 3.
   • <mask> — subnet mask.

   Square brackets [ ] must be separated by spaces on both sides.

10. Create a default route to the internet:

    create network gateway interface port0 enabled on ip <gateway> weight 1 default on

    Specify <gateway> — gateway of the Direct Connected subnet. You can find the gateway address in the control panel: in the top menu, click Products → VMware-based cloud → data center page → Direct Connected subnets tab → Gateway.

UGOS 7.1 and higher

1. From the control panel, open the Cloud Director panel: in the top menu, click Products → VMware-based cloud → Cloud Director.

2. Open the virtual data center page → Virtual Machines.

3. Open the virtual machine page.

4. Click POWER ON.

5. Click LAUNCH WEB CONSOLE.

6. Select the UGOS NGFW (serial console) mode.

7. Connect to the firewall:

   • login — Admin;
   • password — usergate.

8. Go to configuration mode:

   configure

9. Assign an IP address to the internet port:

   set network interface adapter port0 ip-addresses [ <ip_address>/<mask> ]

   Specify:

   • <ip_address> — address from the Direct Connected subnet that you assigned to the virtual machine when connecting to the public subnet in step 3;
   • <mask> — subnet mask.

   Square brackets [ ] must be separated by spaces on both sides.

10. Create a default route to the internet:

    create network gateway interface port0 enabled on ip <gateway> weight 1 default on

    Specify <gateway> — gateway of the Direct Connected subnet. You can find the gateway address in the control panel: in the top menu, click Products → VMware-based cloud → data center page → Direct Connected subnets tab → Gateway.

5. Initialize the firewall

1. Open the page in your browser:

   https://<ip_address>:8001

   Specify <ip_address> — IP address that you assigned to access the firewall in step 4.

2. Go to the Settings section.

3. Select the system language.

4. Select the time zone.

5. Accept the license agreement.

6. Change the administrator password.

7. Wait for the installation procedure to complete.

6. Specify DNS and NTP servers

1. Open the page in your browser:

   https://<ip_address>:8001

   Specify <ip_address> — IP address that you assigned to access the firewall in step 4.

2. Go to the Settings → Network → DNS section.

3. Click Add.

4. Specify the DNS server IP addresses. We recommend using Selectel recursive DNS servers, but you can specify any available DNS servers.

5. Click Save.

6. Go to the Settings → Network → NTP section.

7. Click Add.

8. Specify the NTP server IP addresses. We recommend using Selectel NTP servers, but you can specify any available NTP servers.

9. Click Save.

7. Activate the license

UGOS 6

1. Open the page in your browser:

   https://<ip_address>:8001

   Specify <ip_address> — IP address that you assigned to access the firewall in step 4.

2. Go to the License Information → Registered version section.

3. Enter the pin code received in the ticket when ordering the firewall.

4. Click Next.

5. Fill out the registration form. We recommend using the same data as in your Selectel account.

6. Click Next.

7. Wait for the device to register. Information about the license composition and component expiration dates will be displayed in the License Information section.

UGOS 7 and higher

1. Open the page in your browser:

   https://<ip_address>:8001

   Specify <ip_address> — IP address that you assigned to access the firewall in step 4.

2. Go to the License Information → Registered version section.

3. Enter the pin code received in the ticket when ordering the firewall.

4. Click Next.

5. Wait for the device to register. Information about the license composition and component expiration dates will be displayed in the License Information section.