Installing Policy Server

Installation flow with Step 2 (Install Components) highlighted

You are here: Step 2 — Install Components.

Deployment Models

You can install the Policy Server in two ways depending on scale and management method.

Type

Description

Note

On-premises

Install the Policy Server inside your network to manage policies and network resources.

Cloud managed

Deploy a virtual Policy Server in a cloud environment. Administrators manage policies and networks via the cloud console and Web UI.

Before deploying in the cloud, prepare the cloud environment (VPC, subnets, security groups) per your provider's documentation.

Prepare the Environment

You can install the Policy Server on a physical system or a virtual machine.
Refer to Install Ubuntu OS to prepare Ubuntu OS 24.04.4 LTS.

Note

You can install the Policy Server on a virtual machine.
ZTNA supports various hypervisors such as VMware, VirtualBox, and XenServer.

Prepare Network Connectivity

Genian ZTNA requires at least one static IP address for network connectivity.
For an on-premises deployment, that interface can be used as the management interface.
Genian ZTNA connects to the network broadcast domain to monitor all broadcast packets.
If the target network is reachable only over a WAN, you need a separate, physically placed Network Sensor.

Note

When using a virtual machine, select the network interface type as Bridge mode.
If you plan to use VMware ESXi with an 802.1Q trunk port, enable VGT mode. See https://kb.vmware.com/s/article/1004252
or Configuring Trunking in Virtual Environments.

Install the Policy Server

Step 1: Switch to the root account

genian@genian:~$ sudo su
[sudo] password for genian:
root@genian:/home/genian#

Step 2: Update and upgrade packages

root@genian:/home/genian# apt-get update
root@genian:/home/genian# apt-get upgrade

Step 3: Install curl (required for installation)

root@genian:/home/genian# apt install curl

Step 4: Install Genian ZTNA Policy Center

curl -sSLk https://bit.ly/4fX6bQ8 | sudo PROMPT=0 SSHALLALLOW=1 SSHPORT=22 TARGET=GPC DEB=ztna LOCALE=en bash -

Initial Configuration Wizard

When the installation command finishes installing the packages, the Initial Configuration Tool starts automatically in the same terminal, before the system reboots. Answer the prompts in order. A value in brackets is the default; press Enter to accept it.

The following example configures a single (stand-alone) Policy Server connected to an access port.

1. Interactive Wizard
2. Manual Configuration

Select installation type: 1

1. Single Server - Stand Alone
2. Multi Server - Backend (Log/Database Server)
3. Multi Server - Frontend (Node/Mgmt Server)

Select Server Type: 1

1. English
2. Korean

Select System Language: 1

Enter administrator username (4-31 characters) [admin]: admin

# Password must contain at least one alphabet, number and special character
Enter administrator password (minimum 9 characters):

Re-enter Password:

Enter NTP server [pool.ntp.org]:

Is 'eth0' connected to 802.1Q trunk port (y/n) ? n

# Network configuration for [eth0]

Enter IP Address: 192.0.2.10

Enter Netmask [255.255.255.0]:

Enter Default Gateway: 192.0.2.1

Enter DNS Server IP Address(es) (seperated by comma): 192.0.2.53

Do you want to enable 'eth0' as a wired network sensor (y/n) ? y

Prompt

Description

Select installation type
1. Interactive Wizard: Configure the system with the prompts below.
2. Manual Configuration: Set only the administrator account and exit. Configure the rest in the CLI as described in Configure the Policy Server.

Select Server Type
Single Server - Stand Alone: One server runs all Policy Server roles.
Multi Server - Backend: The Log/Database server of a multi-server deployment. Install it first.
Multi Server - Frontend: The Node/Management server of a multi-server deployment. It also asks for the Backend server IP address and database password.

Select System Language

The system language (English or Korean).

License agreement

If an end user license agreement is displayed, type yes to agree.

Administrator username / password

The Web UI administrator account. The username is 4–31 characters (default admin). The password is at least 9 characters and includes letters, numbers, and special characters.

NTP server

The time server (default pool.ntp.org).

Select management interface

Asked only when the system has two or more network interfaces.

802.1Q trunk port

Type y if the interface is connected to an 802.1Q trunk port, then enter the VLAN IDs to monitor (for example, 20,30-35, up to 128) and the VLAN ID of the management interface. Otherwise type n (access port).

IP address / Netmask / Default gateway / DNS server

Network settings of the management interface. Values configured during the Ubuntu installation may be pre-filled. The settings take effect after the system reboots.

Wired network sensor

Asked for Single Server only. Type y to also use the Policy Server as a Network Sensor on this interface. If a wireless adapter is installed, it also asks whether to use it as a wireless sensor.

After the last prompt, the Configuration Summary is displayed. Verify the values and type y to start, or n to start over. The tool then checks the network interface, default gateway, DNS server, and NTP server. If a check fails, choose 1 (Testing again), 2 (Reconfigure), or 3 (Continue).

When the configuration is complete, the tool shows the URLs of the Web UI (https://<IP address>:8443/) and the agent download page (https://<IP address>/agent/).

Note

The Policy Server installation command uses PROMPT=0, so the system reboots automatically about 5 seconds after the installation finishes. Sign in to the Web UI after the reboot.

Configure the Policy Server

If you selected 2. Manual Configuration in the wizard, configure the Policy Server with the following steps.

Step 1: Access Ubuntu and gnlogin

After installation completes, access Ubuntu and run gnlogin for initial setup.

genian@genian:~$ sudo su
[sudo] password for genian:
root@genian:/home/genian#
# Obtain root privileges
root@genian:/home/genian# gnlogin
# Enter Genian Shell

Note

You must have root privileges to apply interface settings properly.

Step 2: Configure interfaces

Configure the default interface of the device.

  1. Enter global configuration mode with the "enable" command.

  2. Enter configuration mode with the "configure terminal" command.

  3. Set the interface IP address and subnet mask.

  4. Set the interface default gateway.

  5. Set the device default gateway.

  6. Set the device DNS server.

  7. Set the device NTP server.

genian> enable
Password : (contact Technical Support for the enable password)
genian# configure terminal
genian(config)# interface [interface-name] address [IP] [Subnetmask]
genian(config)# interface [interface-name] gateway [IP]
genian(config)# ip default-gateway [IP]
genian(config)# ip name-server [IP]
genian(config)# ntp server [IP]
// If you configured interfaces during Ubuntu installation, some IP-related settings may already be present.

Step 3: Configure the Database server

Set up the Database server.

  1. Set the DB account.

  2. Enable the DB server.

  3. Set the DB access password.

  4. Configure DB access permissions.

genian(config)# data-server username [DB-username]
genian(config)# data-server enable
genian(config)# data-server password [DB-password]

Step 4: Configure the Log Server

Start the Log Server.

genian(config)# log-server version 6
genian(config)# log-server enable
genian(config)# log-server publish-port [interface-name]

Step 5: Configure Web UI and SOAP Server

  1. Enable the Web UI.

  2. Enable the SOAP server.

genian(config)# interface [interface-name] management-server enable
genian(config)# interface [interface-name] node-server enable

Step 6: Create an administrator account

Create the administrator account for the Genian ZTNA Web UI. This can be set only once.

  1. Create the Web UI account.

genian(config)# superadmin [admin-id] [admin-password] [admin-email]

Note

The administrator password must be at least 9 characters and include letters, numbers, and special characters.

Step 7: Access the Web UI

After completing the steps above, log in to the Genian ZTNA Web UI and verify the installation.

Note

For Web UI information, see Administration Console.

Note

After installation, install your license to enable Visibility and Control features. See Installing License.

Note

Until a ZTNA license is installed, the login page and the Web UI header show Genian NAC. After you install the ZTNA license, refresh the page or sign in again to see Genian ZTNA.

Unsupported hardware

If installation does not proceed normally, contact your partner engineer or Technical Support.

Note

If storage devices or network interfaces are not recognized in a virtual environment, change the storage type to SATA or change the network interface driver to an Intel family such as E1000.