opensense-docs/source/manual/how-tos/installazure.rst

==================================
OPNsense Azure Virtual Appliance
==================================

OPNsense is a fully featured security platform that secures your network with high-end features such as
inline intrusion prevention, virtual private networking, two factor authentication,
captive portal and filtering web proxy. The optional high availability setup ensures stable network performance
with automatic failover and synchronised states, minimising disruption.
Keep your network secure and the good packets flowing.

The Virtual Appliance is available on the Microsoft Azure Marketplace (`here <https://azuremarketplace.microsoft.com/nl-nl/marketplace/apps/decisosalesbv.opnsense?tab=Overview>`__).

.. image:: images/azure_offer.png
    :width: 100%

Our installation manual will guide you through a simple installation scenario using 1 network interface, for
more advanced network setups you best checkout the Azure `documentation <https://docs.microsoft.com/nl-nl/azure/virtual-machines/linux/multiple-nics>`__.

-------------------------
Setup : Basic settings
-------------------------

The Marketplace create button guides you to the initial virtual machine setup, choose your subscription and system
preferences here and name your virtual machine.

.. image:: images/azure_deploy_basics.png
    :width: 100%

Next make sure you create an initial administrative user, since some names are reserved (like admin and root), you
need to choose another one here. In our example we choose :code:`adm001` here.

.. Note::

    You can enable the root user after installation, the setup user can access the system using ssh or https after installation
    todo so.

.. image:: images/azure_deploy_basics_user.png
    :width: 100%


-------------------------
Setup : Disks
-------------------------

Next you can choose a disk type to use, **standard SSD** is fast enough for most workloads.

.. image:: images/azure_deploy_disks.png
    :width: 100%


-------------------------
Setup : Network
-------------------------

For our example, we kept our settings simple using a **private IP** which is accessible over port **443 (https)**
after bootup. Most settings can be changed after deployment.

.. image:: images/azure_deploy_network.png
    :width: 100%

.. Note::

    Microsoft has quite some information available about different networking settings and options
    `here <https://docs.microsoft.com/nl-nl/azure/virtual-machines/windows/network-overview>`__


------------------------
Create
------------------------

Proceed to **Review + create** to finalize the deployment.


------------------------
Login to your instance
------------------------

When the virtual machine is created and booted for the first time, you can login using the assigned user (:code:`adm001`),
now you can enable the root user if you like in :menuselection:`System -> Access -> Users`

.. image:: images/azure_startup_users.png
    :width: 100%

.. Note::

    Our Azure virtual appliance has ssh enabled by default, you can change these settings in :menuselection:`System -> Settings -> Administration`