Installation Process

System Requirements

Compulsory conditions for work with SafeUTM:
1. UEFI support.
2. Turn off Legacy boot mode, it may be called CSM (Compatibility Support Module).
3. Turn off Secure Boot option in UEFI.

Hardware	Minimum system requirements	Note
Processor	Intel Pentium G/i3/i5/Xeon E3/Xeon E5 with SSE 4.2 instructions support	Requirements may differ depending on network load and services used, as well as content filtering, antiviruses and intrusion prevention system. The system requires at least two cores, better four-core processor to operate.
RAM	8 Gb (16Gb if number of users is over 75)	Requirements may differ depending on network load and services used, as well as content filtering, antiviruses and intrusion prevention system.
Disk subsystem	HD or SSD, capacity 64 Gb or more, with SATA, SAS. Additional HD or SSD when using mail server	Software RAID controllers are not supported (those integrated in the chipset or motherboard). Using hardware RAID controllers is not recommended.
Network adapters	One network adapter	Gigabit (or 10G) Intel network cards are recommended.
Additional	Display and keyboard	No preinstalled OS or additional software is required to install and run SafeUTM. SafeUTM is installed to a dedicated server from an installation USB-flash, a file system is automatically created and all necessary components are installed.

In order to choose the best hardware platform for you please follow the guidelines on equipment choice for SafeUTM. The approximate hard drive capacity to store the information of about 1000 users for 1 year is 10-15 Gb.

Browser support for server administration web interface

All up-to-date versions of Firefox, Chrome and browsers based on Chromium are supported. Internet Explorer is not supported.

Hypervisor support

Microsoft Hyper-V (2^nd generation, Windows 2012R2 or higher), VMware, VirtualBox, KVM, Citrix XenServer. Details about setup features.

Configuration examples

Examples of several types of configuration depending on the number of users can be seen in the table below.

Hardware	25	50-200	200-500	1000	2000
Processor	Intel Pentium Gold G5400 or compatible	Intel i3 8100 or compatible	Intel i5, i7, Xeon E3, 3 GHz and up, or compatible	Intel Xeon E3, E5 or compatible	Intel Xeon or compatible 8-core one
RAM	8 Gb	8 Gb	16 Gb	16 Gb	32 Gb
Disc subsystem	64 Gb	64 Gb	250 Gb	500 Gb	500 Gb
Network adapters	2 pcs.	2 pcs.	2 pcs.	2 pcs.	2 pcs.

Performance data:

Configuration example No1: Intel Atom C3758, 8 GB DDR4, 1GB LAN.

Mode L3: TCP up to 1 Gbps, UDP up to 1 Gbps, HTTP up to 600 Mbps.
*Mode L7: TCP up to 160 Mbps, UDP up to 280 Mbps, HTTP up to 100 Mbps.

Configuration example No2: Intel Xeon E-2234, 16 GB DDR4, 1 GB LAN.

Mode L3: TCP up to 1 Gbps, UDP up to 1 Gbps, HTTP up to Gbps.
*Mode L7: TCP up to 550 Mbps, UDP up to 900 Mbps, HTTP up to 500 Mbps.

* - Mode L7: IPS modules, content filtering, application control, antivirus scan are on.

Installation Options

You can install SafeUTM on a dedicated server or a virtual machine. It depends on the expected load and equipment capacity.

SafeUTM installation from USB flash drive

SafeUTM can be installed from a flash drive by burning an installation ISO file on it. The process of installation flash drive preparation is described in Creation of boot USB flash drive.

Installation on a dedicated server

In order to install SafeUTM security gateway you need to follow these steps:

Prepare hardware in accordance with technical requirements.
Prepare a USB-flash drive with capacity over 2 Gb.
Download ISO file from your personal account: ideco.ru
For safety reasons check the downloaded file checksum, which you can find on the SafeUTM downloads page in your personal account.
Burn the ISO file on the USB-flash drive.
In the computer’s BIOS settings choose download from USB-flash drive and start the system download from the prepared drive. SafeUTM installer should appear on the screen as seen below.

Installation Process

Stage 1. Installation mode

Select Installation mode:

Install SafeUTM.
Install SafeUTM in basic graphics mode.

Select the second option if you are experiencing problems with installer elements view.

Installation mode selection menu:

Stage 2. Start of installation

Choose disc for installation. To do this, put in the number of the disc you wish to use and press Enter.

The system will alert you about the loss of all data stored on the disc. We recommend that you make sure the disc does not contain any important information, as it will not be possible to recover it. Data loss alert can be seen in the screenshot below. To continue, type y and press Enter.

Now you need to select the time zone. Select the time zone you are in. To do this, type y and press Enter.

In the next dialog box, you need to set up date and time. If the settings are correct, type y and press Enter.

If the current settings are incorrect, type n and put in correct data, then press Enter.

Then the system will perform disc subsystem tests necessary for installation:

Create partitions table and format them.
Copy system files onto disc.
Configure basic system settings in accord with your computer configuration.

Don’t forget to eject the distributive drive when restarting UTM so that the system didn’t start loading from the installation drive.

After the server restarts you will see a window with system info. An example of such window can be seen below. To continue press any key.

If you want to configure the server as the second node of the cluster, press y and then Enter. For more information about configuring clustering, see article Clustering.

If the clustering setup is not required, press n and then Enter.

Stage 3. Creating admin’s account

Create admin’s account. After typing in login press Enter and type in a new account password, then press Enter.

Admin password requirements:

Minimum 10 symbols.
Upper- and lower-case Latin letters.
At least one digit
Special characters (! # $ % & ' * + etc.)

If the password does not conform to the security policy requirements, a notification about password unreliability will appear. You need to type in another password taking into consideration password requirements and press Enter.

When the account has been created, press any key to switch to the local menu and type in data from the newly created admin’s account.

Stage 4. Network adapter setup

Now the system will suggest that you set up a local network interface. It is the interface to which all your enterprise network will be connected. Type in the network adapter number from the list and press Enter.

During local interface definition you may encounter difficulties with NIC identification. Sometimes several adapters may have the same manufacturer. In such a case in order to avoid a mistake you need to identify the device by its MAC-address. Do not worry about making a mistake, you can change these settings at any moment.

Type in the local IP address subnet mask as ip/mask and press Enter.

Next, if necessary, create VLAN tag or leave the field empty and press Enter.

After creating a local interface, the server administration menu will open.

The next step is SafeUTM configuration. This process is described in Initial configuration.