Preparing the network

Creating a virtual network

Create a virtual network and add several subnets for FortiDeceptor management and deployment.

To create a virtual network:

1. Create a Virtual Network.
   1. In the portal menu, click Virtual networks.
   2. In the Virtual Networks page, click Create.

      

   3. In the Basics tab, configure the network details.

      Subscription		Select a subscription from the dropdown.
      Resource group		Select a resource group from the dropdown.
      Name		Enter a name for the instance.
      Region		Select a region from the dropdown.

   

2. Create Subnets in the Virtual Network.
   1. Click the IP Addresses tab.
   2. Configure the IPv4 address space.
   3. Click Add subnet. The Add subnet pane opens.
   4. Configure the Subnet address range and click Add.

      

   5. (Optional) Add additional subnets. You can add up to six subnets.

      

   6. Click Review + Create.

Creating network security groups and rules

Create a network security group and add security rules for filtering network traffic to and from FortiDeceptor in a virtual network.

To create a network security group and add rules:

1. From the Home page, click Create a resource.
2. In the navigation menu, click Networking > Network security group.

   

3. Click Networking, then click Network security group.
4. In the toolbar, click Create and configure the network security group.

   

5. In the menu click Inbound security rules and click Add. The Add inbound security rule pane opens.

   

6. Configure the Source, Source port ranges, and Destination port ranges, and click Add.

   

   Make sure to enable an inbound rule for port 8443 for the client's first interface/port1 to manage FortiDeceptor cloud appliances. This is enables the FortiDeceptor Manager to communicate with the cloud clients.

7. (Optional) Open additional ports. For example, you can enable port 443, 445, 80, and add other inbound/outbound rules as needed.