Creating a FortiAnalyzer-VM

To create FortiAnalyzer-VM on Azure:

1. Find the FortiAnalyzer-VM in the Microsoft Azure Portal:
   1. Log into the Microsoft Azure Portal and click Create a resource.

      

   2. Search for FortiAnalyzer Centralized Log Analytics and select it from the search results.

      

      

2. Click Create.

3. Configure the Basics section:

   

   1. Select the appropriate Subscription from the dropdown list. You may have only one option here. Ensure your organization's subscription allows you to purchase the product.

   2. Select the Resource group. You can either create a new resource group or select an existing one.

   3. Select the appropriate Region for the deployment.

   4. Enter a FortiAnalyzer-VM name in the FortiAnalyzer instance name field.

   5. Under FortiAnalyzer Version, select the desired version.

   6. Set a FortiAnalyzer administrative username. This name cannot be admin or root.

   7. Enter a FortiAnalyzer password for the new account and confirm the password. For security reasons, it is not possible to reset this password through the Microsoft Azure portal, so make sure that you remember the password.

   8. Click Next: Network and Instance Settings.

4. Configure the Network and Instance Settings section:

   

   1. Select the Virtual network. You can either create a new virtual network (VNet) or select an existing one.

   2. Select the Subnet where the FortiAnalyzer-VM will be deployed.

   3. In Virtual machine size, select the appropriate VM size for your deployment. In the Microsoft Azure Marketplace, the FortiAnalyzer-VMs come in a variety of sizes. Each VM size within each series has different limits for the amount of memory, number of NICS, maximum number of data disks, size of cache, and maximum IOPS and bandwidth.

   4. Click Next: FortiAnalyzer IP address assignments.

5. Configure the FortiAnalyzer IP address assignments section:

   

   1. Select First public IP address resource name. You can either create a new public IP address or select an existing one.

   2. In the Public IP address type field, select Dynamic or Static. It usually fine to accept the default value.

   3. Click Next: Review + create.

6. Wait for validation to pass, then click Create. If an error occurs at this stage, resolve it or contact Microsoft support.

   Azure deploys the FortiAnalyzer-VM and displays a success message upon completion. The deployment may take 30 minutes or longer to complete.

   FortiAnalyzer-VM requires a minimum disk size of 500GB. By default, a log disk of 1 TB is automatically allocated to a FortiAnalyzer-VM instance.