AWS Installation Guide

Follow these steps to install an enforza firewall instance in AWS using userdata and the AWS Console

Step 1

Create a new AWS EC2 instance (select an Ubuntu or Debian image)

Step 2

Scroll down and input the following into the User data input box

#!/bin/bash
curl -s -L https://efz.io/install | bash

Step 3

If you want to log on to your linux server via SSH, select an existing SSH key pair or create a new one.

Step 4

The new EC2 linux server will now be built. You can see the progress and details by clicking the link (i-xxxxxxx)

Step 5

The "Instance State" is now running and your linux server has been built.
In the background, the enforza agent is being installed and provisioned automatically.

Step 6

As this server is acting as a firewall router, we need to disable the source/destination check.
Click on Actions > Change source/dest. check

Step 7

Uncheck the Enable tickbox

Step 8

As you are provisioning a firewall, we need to allow all traffic on the network interface and let the enforza agent deal with the traffic filtering. Look at the page from Step 5, scroll down, and click on the security group.

Note: it is highly recommended that you do not allow all traffic on an interface that is not a security appliance!

Step 9

Change the security group to type: All traffic, Source: Custom - 0.0.0.0/0 then Save rules

Step 10

After a couple of minutes, go back to the Instances view, click the checkbox next to your newly provisioned firewall. Then Actions > Monitoring and troubleshooting > Get system log

Step 11

This is the system log of your newly provisioned firewall.
In here we can see the enforza claim key - you need this to be able to claim your device from the enforza portal.

The key is next to "efzClaimKey0" - select and copy this to clipboard.