Fortinet Document Library

Version:


Table of Contents

21.1.0
Download PDF
Copy Link

Deployment

You can deploy FortiGate Cloud using one of the following methods:

After deploying FortiGate Cloud using one of the methods described, complete basic configuration by doing the following:

  1. Create a firewall policy with logging enabled. Configure log uploading if necessary.
  2. Log in to FortiGate Cloud using your FortiCloud account.
Note

For FortiGates that are part of a high availability (HA) pair, you must activate FortiGate Cloud on the primary FortiGate. Activate FortiGate Cloud on the primary FortiGate as To deploy a FortiGate/FortiWifi to FortiGate Cloud in the FortiOS GUI: describes. FortiGate Cloud activation on the primary FortiGate activates FortiGate Cloud on the secondary FortiGate. Local FortiGate Cloud activation on the secondary FortiGate will fail.

To deploy a FortiGate/FortiWifi to FortiGate Cloud using the FortiCloud key:
  1. Log in to the FortiGate Cloud portal.
  2. Do one of the following:
    1. Click Add Fortigate.

    2. Go to Inventory, then click Import FortiCloud Key.

  3. Enter the key printed on your FortiGate.
  4. From the Select Display Timezone for Device dropdown list, select the desired time zone.
  5. Under Select Sub Account, select the desired subaccount.
  6. Click Submit.
    Note

    After the device is successfully deployed, the device key becomes invalid. You can only use the key once to deploy a device.

To deploy multiple FortiGate/FortiWifi devices to FortiGate Cloud using a FortiDeploy bulk key:
  1. Log in to the FortiGate Cloud portal, then click Inventory.
  2. Click Import Bulk Key.
  3. In the Please input the Bulk Key: field, enter the FortiDeploy bulk key.
  4. Click Submit. The portal displays a list of the FortiGate/FortiWifi serial numbers associated with the bulk key. If any FortiGate/FortiWifi devices failed to be added to FortiGate Cloud, FortiGate Cloud lists those failed devices' serial numbers.

To deploy a FortiGate/FortiWifi to FortiGate Cloud in the FortiOS GUI:
  1. In the FortiCloud portal, ensure that you have a product entitlement for FortiGate Cloud for the desired FortiGate or FortiWifi.
  2. In FortiOS, do one of the following:
    1. Go to Security Fabric > Settings, and enable Central Management. Click FortiGate Cloud.
    2. In the Dashboard, in the FortiGate Cloud widget, the Status displays as Not Activated. Click Not Activated.
  3. Click the Activate button.
  4. In the Activate FortiGate Cloud panel, for Account, select FortinetOne.
  5. In the Email and Password fields, enter the email address and password associated with the FortiCloud account.
  6. Enable Send logs to FortiGate Cloud. Click OK.

  7. This should have automatically enabled Cloud Logging. Ensure that Cloud Logging was enabled. If it was not enabled, enable it, then set Type to FortiGate Cloud.

  8. At this point you can access Analysis and SandBox features for this device. To access Management features, you must authorize the FortiGate in FortiGate Cloud by entering the a local superadministrator username and password when prompted. After authorization, you can manage that FortiGate from FortiGate Cloud.
  9. You must set the central management setting to FortiCloud, as this is the initial requirement for enabling device management features.
To unsubscribe from FortiGate Cloud:

You can disconnect your account from the dashboard in your FortiGate/FortiWifi.

  1. In the FortiOS Dashboard FortiGate Cloud widget, the Status appears as Activated. Click Activated, then click the Logout button.
  2. In the confirmation dialog, click OK. This detaches the FortiGate/FortiWifi from the account and stops uploading logs.
To move a FortiGate/FortiWifi deployed to FortiGate Cloud to another account:

To move a FortiGate/FortiWifi that is already deployed to FortiGate Cloud to another account and retain its historical data, you must follow these instructions.

  1. Log in to the FortiGate Cloud portal using the account that the FortiGate/FortiWifi is currently deployed on.
  2. Click the Config icon for the desired device.
  3. Click Authorize New Account.
  4. In the Account ID field of the Authorize New Account dialog, enter the desired new account. Click Submit.
  5. In FortiOS, go to Security Fabric > Settings. Log out of the FortiGate Cloud account that the FortiGate/FortiWifi is currently deployed on.
  6. Deploy the device to FortiGate Cloud using the new account by following the instructions for To deploy a FortiGate/FortiWifi to FortiGate Cloud in the FortiOS GUI:.

Deployment

You can deploy FortiGate Cloud using one of the following methods:

After deploying FortiGate Cloud using one of the methods described, complete basic configuration by doing the following:

  1. Create a firewall policy with logging enabled. Configure log uploading if necessary.
  2. Log in to FortiGate Cloud using your FortiCloud account.
Note

For FortiGates that are part of a high availability (HA) pair, you must activate FortiGate Cloud on the primary FortiGate. Activate FortiGate Cloud on the primary FortiGate as To deploy a FortiGate/FortiWifi to FortiGate Cloud in the FortiOS GUI: describes. FortiGate Cloud activation on the primary FortiGate activates FortiGate Cloud on the secondary FortiGate. Local FortiGate Cloud activation on the secondary FortiGate will fail.

To deploy a FortiGate/FortiWifi to FortiGate Cloud using the FortiCloud key:
  1. Log in to the FortiGate Cloud portal.
  2. Do one of the following:
    1. Click Add Fortigate.

    2. Go to Inventory, then click Import FortiCloud Key.

  3. Enter the key printed on your FortiGate.
  4. From the Select Display Timezone for Device dropdown list, select the desired time zone.
  5. Under Select Sub Account, select the desired subaccount.
  6. Click Submit.
    Note

    After the device is successfully deployed, the device key becomes invalid. You can only use the key once to deploy a device.

To deploy multiple FortiGate/FortiWifi devices to FortiGate Cloud using a FortiDeploy bulk key:
  1. Log in to the FortiGate Cloud portal, then click Inventory.
  2. Click Import Bulk Key.
  3. In the Please input the Bulk Key: field, enter the FortiDeploy bulk key.
  4. Click Submit. The portal displays a list of the FortiGate/FortiWifi serial numbers associated with the bulk key. If any FortiGate/FortiWifi devices failed to be added to FortiGate Cloud, FortiGate Cloud lists those failed devices' serial numbers.

To deploy a FortiGate/FortiWifi to FortiGate Cloud in the FortiOS GUI:
  1. In the FortiCloud portal, ensure that you have a product entitlement for FortiGate Cloud for the desired FortiGate or FortiWifi.
  2. In FortiOS, do one of the following:
    1. Go to Security Fabric > Settings, and enable Central Management. Click FortiGate Cloud.
    2. In the Dashboard, in the FortiGate Cloud widget, the Status displays as Not Activated. Click Not Activated.
  3. Click the Activate button.
  4. In the Activate FortiGate Cloud panel, for Account, select FortinetOne.
  5. In the Email and Password fields, enter the email address and password associated with the FortiCloud account.
  6. Enable Send logs to FortiGate Cloud. Click OK.

  7. This should have automatically enabled Cloud Logging. Ensure that Cloud Logging was enabled. If it was not enabled, enable it, then set Type to FortiGate Cloud.

  8. At this point you can access Analysis and SandBox features for this device. To access Management features, you must authorize the FortiGate in FortiGate Cloud by entering the a local superadministrator username and password when prompted. After authorization, you can manage that FortiGate from FortiGate Cloud.
  9. You must set the central management setting to FortiCloud, as this is the initial requirement for enabling device management features.
To unsubscribe from FortiGate Cloud:

You can disconnect your account from the dashboard in your FortiGate/FortiWifi.

  1. In the FortiOS Dashboard FortiGate Cloud widget, the Status appears as Activated. Click Activated, then click the Logout button.
  2. In the confirmation dialog, click OK. This detaches the FortiGate/FortiWifi from the account and stops uploading logs.
To move a FortiGate/FortiWifi deployed to FortiGate Cloud to another account:

To move a FortiGate/FortiWifi that is already deployed to FortiGate Cloud to another account and retain its historical data, you must follow these instructions.

  1. Log in to the FortiGate Cloud portal using the account that the FortiGate/FortiWifi is currently deployed on.
  2. Click the Config icon for the desired device.
  3. Click Authorize New Account.
  4. In the Account ID field of the Authorize New Account dialog, enter the desired new account. Click Submit.
  5. In FortiOS, go to Security Fabric > Settings. Log out of the FortiGate Cloud account that the FortiGate/FortiWifi is currently deployed on.
  6. Deploy the device to FortiGate Cloud using the new account by following the instructions for To deploy a FortiGate/FortiWifi to FortiGate Cloud in the FortiOS GUI:.