//Include any predeployment steps here, such as signing up for a Marketplace AMI or making any changes to a partner account. If there are no predeployment steps, leave this file empty.

== Predeployment steps

=== Subscribe to the Marketplace listing

Navigate to the https://aws.amazon.com/marketplace/pp/prodview-mpk3c2gkda3w4[Cisco Secure Firewall Cloud Native BYOL Marketplace listing] and click *Continue to Subscribe*.

=== Prepare your {partner-company-name} account

* Obtain Cisco Secure Firewall Cloud Native license from your Cisco accounts team and add it to your https://www.cisco.com/c/en/us/buy/licensing.html[Cisco smart account^].
* If the license is unavailable, Cisco SFCN can run with a single enforcement point at 100 Kbps throughput. 
* The https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/cloud-native/getting-started/secure-firewall-cloud-native-gsg/sfcn-licensing.html[Cisco Secure Firewall Cloud Native Licensing chapter^] provides complete information about licensing the product.

=== Prepare for the deployment

* Create At least one Amazon EC2 key pair: Ensure that at least one Amazon EC2 key pair exists in your AWS account in the Region where you plan to deploy the Secure Firewall Cloud Native RA-VPN solution. Make note of the key pair name. You need it to create a secret to allow the cluster to pull down files from your S3 bucket. See https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/cloud-native/getting-started/secure-firewall-cloud-native-gsg/sfcn-aws.html#Cisco_Task.dita_7f6b3cc2-4435-493c-8100-c5f31923612f[Create a key pair^] for more information.
* Download the AnyConnect package files from https://software.cisco.com/download/home/286281283/type/282364313/release/[Cisco Software Download portal^] (The recommended AnyConnect version is 4.8 or higher)
*** anyconnect-linux64-4.9.05042-webdeploy-k9.pkg
*** anyconnect-win-4.9.05042-webdeploy-k9.pkg
*** anyconnect-macos-4.9.05042-webdeploy-k9.pkg
* Create AnyConnect client profile(s).
* Create a S3 bucket and upload Cisco Anyconnect image(s) and Anyconnect profile(s) to S3: Make the files available for uploading to the cluster. This can be done by either serving them over HTTP/HTTPS or syncing them to an S3 bucket. This example shows the S3 bucket used to provision the cluster.

   aws s3 cp . s3://$BUCKET --recursive --exclude "*" --include "anyconnect-*"