Deploy With Nebula Native Mode (for Nebula Firewalls in NCC only)
Nebula native mode means the Nebula Firewall has a certificate (ZTP (Zero Touch Provision) or factory) to connect with NCC.
*Make sure the Nebula Firewall can connect to NCC through the Internet by using any of the following methods:
– DHCP WAN, or
– configure WAN through the Nebula Firewall’s Web Configurator.
If you are adding a ZyWALL USG FLEX / ATP / USG20(W)-VPN Series Nebula Firewall (NF) with v5.10 and later firmware to a site, or if your NF has run ZTP before, do the following to deploy the NF using Nebula native mode:
• Reset the NF to factory-default settings
• Select the Nebula management mode.
Reset the NF to Factory-Default Settings
*You only need to do this if you have configured the NF before.
Press the RESET button on the NF panel (see the NF user’s guide for more information).
*Apply the factory-default settings on the NF before switching to cloud mode. Only the following two settings can be changed after resetting:
• Default administrator account password
• WAN settings
Select the Nebula Management Mode
1 Log in to the NF Web Configurator (see the NF user’s guide for more information). When you log in to the Web Configurator, the Initial Setup Wizard screen displays.
2 Select Nebula Mode and click Next.
3 Configure the WAN settings and click Next.
4 Click Connection Test to check that you can access the Internet and then click Next.
5 Click Go to Nebula.
NCC Configuration
1 You will be redirected to the NCC portal. Click Get Started.
2 Use the Setup Wizard to create an organization and a site, and add the Nebula Firewall. See Setup Wizard for more information on using the wizard.
*Make sure to select Nebula native mode as the Deployment Method in the Setup Wizard.
*Nebula Firewalls with ZLD5.37 Patch 1 or newer firmware do not support the Zero Touch Provision mode (see Step 8: Set up the Deployment Method for more information on the ZTP deployment method).
3 After configuring the Setup Wizard, close the NCC welcome message to go to the NCC portal dashboard. 1/1 Online will show on Firewall Status. This means that one NF is registered in NCC and is online.