Deployment

You can deploy FortiGate Cloud using one of the following methods:

• FortiCloud or FortiDeploy key
• FortiOS GUI

After deploying FortiGate Cloud using one of the methods described, complete basic configuration by doing the following:

1. Create a firewall policy with logging enabled. Configure log uploading if necessary.
2. Log in to FortiGate Cloud using your FortiCloud account.

For FortiGates that are part of a high availability (HA) pair, you must activate FortiGate Cloud on the primary FortiGate. Activate FortiGate Cloud on the primary FortiGate as To deploy a FortiGate/FortiWifi to FortiGate Cloud in the FortiOS GUI: describes. FortiGate Cloud activation on the primary FortiGate activates FortiGate Cloud on the secondary FortiGate. Local FortiGate Cloud activation on the secondary FortiGate fails.

For a FortiGate with a US-Government license to use the US region service of FortiGate Cloud, you must import the device into your US region FortiGate Cloud account by a cloud/FortiDeploy key or use the CLI login command execute fortiguard-log login <email> <password> US if cloud/FortiDeploy key is unavailable.

FortiGate Cloud supports FortiGates with FIPS-CC mode enabled for Management and Analytics features.

To deploy a FortiGate/FortiWifi to FortiGate Cloud using the FortiCloud or FortiDeploy key:

1. Log in to the FortiGate Cloud portal.
2. Do one of the following:
   • Click Add.

     

   • Go to Inventory, then click Import FortiCloud or FortiDeploy key.

     

3. Enter the key printed on your FortiGate.
4. For End User Type, select non-government or government user.
5. For Provision, select one of the following:
   • Select Later to deploy the FortiGate at a later time.
   • Select Now to deploy the FortiGate now.
6. If you selected Now, from the Display Timezone dropdown list, select the desired time zone.
7. (Optional) Under Select Sub Account, select the desired subaccount.
8. Click OK.

   After the device successfully deploys, the device key becomes invalid. You can only use the key once to deploy a device.

To deploy a FortiGate/FortiWifi to FortiGate Cloud in the FortiOS GUI:

1. In the FortiCloud portal, ensure that you have a product entitlement for FortiGate Cloud for the desired FortiGate or FortiWifi.
2. In FortiOS, do one of the following:
   • Go to Security Fabric > Fabric Connectors, and enable Central Management. For Type, select FortiGate Cloud.
   • In the Dashboard, in the FortiGate Cloud widget, the Status displays as Not Activated. Click Not Activated.
3. Click Activate.
4. In the Activate FortiGate Cloud panel, for Account, select FortinetOne.
5. In the Email and Password fields, enter the email address and password associated with the FortiCloud account.
6. Enable Send logs to FortiGate Cloud. Click OK.
7. This automatically enables Cloud Logging. Ensure that Cloud Logging is enabled. If it is disabled, enable it, then set Type to FortiGate Cloud.
8. Set the central management setting to FortiCloud. This is the initial requirement for enabling device management features.

To unsubscribe from FortiGate Cloud:

You can disconnect your account from the dashboard in your FortiGate/FortiWifi.

1. In the FortiOS Dashboard FortiGate Cloud widget, the Status appears as Activated. Click Activated, then click Logout.
2. In the confirmation dialog, click OK. This detaches the FortiGate/FortiWifi from the account and stops uploading logs.

To move a FortiGate/FortiWifi deployed to FortiGate Cloud to another account:

To move a FortiGate/FortiWifi that is already deployed to FortiGate Cloud to another account and retain its historical data, you must follow these instructions.

1. Log in to the FortiGate Cloud portal using the account that the FortiGate/FortiWifi is currently deployed on.
2. Click the Action icon for the desired device.
3. Click Migrate Existing Data.
4. In the Account ID field of the Migrate Existing Data dialog, enter the desired new account. Click OK.
5. In FortiOS, go to Security Fabric > Settings. Log out of the FortiGate Cloud account that the FortiGate/FortiWifi is currently deployed on.
6. Deploy the device to FortiGate Cloud using the new account by following the instructions for To deploy a FortiGate/FortiWifi to FortiGate Cloud in the FortiOS GUI:.

After moving a FortiGate to another FortiGate Cloud account, you must also transfer that FortiGate to the same account in FortiCloud.