Close

Installation Guide

Follow these steps to install an enforza firewall instance on any platform or device

Down Arrow

Step 1

Login to your linux server via SSH (or console)
Beta Supported OS: Debian 11+ or Ubuntu 22.04+

ssh -i ./my-key.pem ubuntu@myserver.example.com
Down Arrow

Step 2

Run the enforza agent install script

curl -s -L https://efz.io/install | sudo bash

For reference, the output should look something like this:

ubuntu@ip-10-8-1-17:~$ curl -s -L https://efz.io/install | sudo bash

Starting enforza-agent installation...
Bootstrap Version: 24.04 LTS (Noble Numbat)

Scanning processes...                                                                                                                                                                                                                                
Scanning candidates...                                                                                                                                                                                                                               
Scanning linux images...                                                                                                                                                                                                                             
Creating /opt/enforza directory structure...
Creating efzadmin user...
useradd: warning: the home directory /opt/enforza already exists.
useradd: Not copying any file from skel directory into it.
Sudoers configuration is valid.
efzadmin added to adm group for log file access.
Downloading AWS IoT Root CA certificate from AWS...
Downloading enforza Provisioning bootstrap...
Downloading files for x86 architecture...
Downloading efz-generateInfo script...
Downloading efz-provision-core script...
Downloading efz-provision-telemetry script...
Downloading efzw-connect daemon...
Downloading efz-telemetry daemon...
Downloading efz claim certificate...
Downloading efz claim private key...
Downloading logrotate.d configs
Downloading efz-agent-remove script
Enabling IPv4 forwarding...
IPv4 forwarding setting is already configured to persist across reboots.
IPv4 forwarding configuration completed.
Running efz-generateInfo...
Running efz-provision-core...
Running efz-provision-telemetry...
Starting daemons...\n
Created symlink /etc/systemd/system/multi-user.target.wants/efz-connect.service → /etc/systemd/system/efz-connect.service.
Created symlink /etc/systemd/system/multi-user.target.wants/efz-telemetry.service → /etc/systemd/system/efz-telemetry.service.

Take note of the following - you will need this to claim & activate your device...

    "efzClaimKey0": "dac3fec6-29b9-4e50-b17a-83c923711872"

Done...
ubuntu@ip-10-8-1-17:~$ 
Down Arrow

Step 3

Then copy the claim key once the install script has finished.

Take note of the following - you will need this to claim & activate your device...

    "efzClaimKey0": "dac3fec6-29b9-4e50-b17a-83c923711872"
Down Arrow

Step 4

Success!!

You have provisioned a firewall with the enforza agent installed.
Simply go to the enforza management portal, claim your device, and push some policies.

Click here for the Quickstart Guide for the next steps.