Appliances

Contents

Managing Appliances in the ETM Dashboard

The ETM Dashboard is a cloud-based service for managing Edge Threat Management appliances. For example, you can perform the following appliance management tasks using the ETM Dashboard:

  • See the status of all your deployments in a single dashboard view.
  • Remotely connect to your appliances without logging in.
  • Push shared configuration profiles to multiple appliances.
  • Backup and restore configuration.
  • Apply or transfer a license subscription.
  • Set up notifications to your email, Arista Go mobile app, Slack, PagerDuty, or VictorOps accounts
  • Review consolidated alerts and reports.

Requirements:

To use ETM Dashboard with your Edge Threat Management deployments, you must meet the following requirements:
  • NG Firewall version 12.2 or higher. No minimum version of Micro Edge is required to connect to the ETM Dashboard.
  • Registered account in ETM Dashboard. You can create an account here.
  • Connect to ETM Dashboard option in NG Firewall must be enabled. You can find this option in Config > System > Support.

The ETM Dashboard is a free service. However, for full functionality, you must assign your appliance a subscription. Features that require an appliance subscription include Policies, Alerts, Reports, and Networks.

Adding an Appliance to your ETM Dashboard Account

You can add NG Firewall and Micro Edge appliances to ETM Dashboard: Adding Edge Threat Management appliances to ETM Dashboard.

Adding Edge Threat Management Appliances to the ETM Dashboard

You can remotely manage and access your NG Firewall and Micro Edge appliances by adding them to your ETM Dashboard account. If the appliance is online but not configured, you can add it based on its serial number by a process referred to as Zero Touch Provisioning. Alternatively, you can add the appliance using its UID if you do not know the serial number.

Upgrading Appliances via the ETM Dashboard

The ETM Dashboard enables the admin to upgrade multiple appliances simultaneously without connecting to each one. You can also configure schedules for automatic upgrades in the ETM Dashboard.

Upgrading Multiple Appliances

  1. Go to the Appliances page. The Appliances grid displays the software version of each device.
  2. Click the blue Update Software button at the top of the list.

     

  3. The list of appliances is filtered only to include those that can be upgraded.
  4. Select the appliances you want to upgrade and click the Update button.


  5.  

The update process is initiated for all selected appliances.

Configuring Scheduled Automatic Upgrades

  1. Go to Appliances and select the appliance to set the scheduling policy.
  2. Click the Update Software button.

     

    Select the day and time you want the appliance updated in the menu that pops up.

  3. Click Set Schedule to apply the schedule.

     

Assigning a Location to Appliances in the ETM Dashboard

The ETM Dashboard and Appliance detail screens display a map showing the geographic location of your appliances. These detail screens help you identify which appliance you want to manage or see from a single view where all your appliances are geographically located. The ETM Dashboard uses IP-based geo-location technology to estimate the location of your appliances. You can assign a precise address in the appliance details if you prefer to define a precise address.

Updating an Appliance Location

Select an appliance to view the current assigned location data in the Appliances view. The appliance location appears in the Appliance Map widget.
To update the location of your appliance or network:
  1. Click Edit.
  2. Enter the new address.
  3. Click Save.

Managing Backup Configurations in ETM Dashboard

The ETM Dashboard enables you to automatically backup configuration data from appliances connected to your account. After an appliance performs at least one backup to the ETM Dashboard, you can select the backup file as a Configuration Template or restore it to the source appliance or any other appliance connected to this account.

Requirements

This functionality requires the Configuration Backup app for NG Firewall.

This feature operates automatically in Micro Edge: no special settings or configurations are required.

Notes Regarding Restoring Backups

A backup file can only be restored to the same version it was drawn from or one newer version. For example, an NG Firewall backup taken on 16.5 can be restored to 16.5 or 16.6. A backup taken on Micro Edge 4.2 can be restored to 4.2 or 4.3.

Backup files are not "backwards compatible," meaning that a backup file cannot be used on an older version of the software than the one it was taken on. For example, NG Firewall 16.5 cannot be restored to an NG Firewall running version 16.4 or older.

NG Firewall backups can only be restored to the NG Firewall. Micro Edge backups can only be restored to Micro Edge.

Restoring a Configuration Backup to the Source Appliance

Select this option to restore an appliance using its backup config settings.
  1. Go to the Appliances heading along the left-hand side of the page and select the Appliances tab.
  2. Select the appliance from the appliances list.
  3. Find the Cloud Backups Widget.
  4. Select a backup file by date and click Restore Backup.
  5. Click Yes to confirm.

Restoring a backup to a different appliance

This option is useful when upgrading or replacing hardware or after a reinstall of the appliance.

Select to push common configurations that you would like shared amongst multiple appliances.
  1. Go to the Appliances heading along the left-hand side of the page and select the Backups tab.
  2. Select the backup configuration you would like to restore. The UID and Label columns identify the NG Firewall from which these settings were taken.
  3. Click the Restore Backup button.
  4. The Restore Backup menu opens, displaying all eligible NG Firewall appliances in your account. Select one or more appliances to push the config and click Restore Backup.
    1. A confirmation menu displays your chosen backup file and the appliances you will restore to. Verify your selections and click Confirm Restore to initiate the backup.

Creating a Backup File Manually

Click the Create Backup button in the Cloud Backups widget on the Appliances page to force an immediate backup of the selected appliance.

Downloading a Backup File

You can download a copy of the backup settings file to your local computer in two ways:
  • From the Cloud Backups widget on the Appliances page, click the link in the Name column.
  • From the Backups page, click the Download button on the right-hand side.

Labeling Appliances in the ETM Dashboard

You can assign a label to appliances in the ETM Dashboard to help you identify them in a list. By default, the appliance displays its hostname first, then its label. In the following screenshot, the label is Demo: z4, in grey.

To Assign a Label:

  1. Click the Appliances option in the top bar.
  2. Select the appliance from the list.
  3. Click the Set Label button.
  4. Enter your label and click Save.
Note: A label is required when adding new appliances to the ETM Dashboard.

How to Remove an Appliance from the ETM Dashboard

In some situations, you may need to remove an appliance from your ETM Dashboard account. For example, you want to move your appliance to another account, or you reinstalled the NG Firewall, and the appliance has a new UID.

Important: removing an appliance from the ETM Dashboard will permanently delete any cloud backups for that appliance.

It is also removed if the appliance is part of an SD Network. However, tunnel configurations created on the appliance will remain and should be removed manually.

Removing an Appliance

To remove an appliance from your account:

  1. Navigate to Appliances.
  2. Select the appliance to be removed.
  3. Click the Remove Appliance button.
  4. Confirm that you want to remove the appliance from your account.