Deploying a FortiGate CNF instance

FortiGate CNF instances can be deployed into AWS or Azure. The same general procedure applies to both.

To create and deploy a new FortiGate CNF instance, use the following procedure:

1. Create a new instance.

   • AWS: See Creating a new AWS FortiGate CNF instance.

   • Azure: See Creating a new Azure FortiGate CNF instance.

   • From a template: See Creating a new FortiGate CNF instance from a template.

2. Add endpoints:

   • AWS: See Adding an endpoint to an AWS instance.

   • Azure: See Adding an endpoint to an Azure instance.

   You may create any number of load balancers, allowing for multiple workloads to be protected by the same FortiGate CNF instance. If a different policy set is needed for a load balancer, create a new FortiGate CNF instance with the needed policy set for that load balancer.

3. Configure policy sets. See Configuring policy sets.

See Editing or viewing a FortiGate CNF instance for more information about instance settings.

For some detailed deployment examples, see Deployment scenarios.

Instances are deployed into your cloud infrastructure using gateway load balancer endpoints (in the case of AWS) or load balancers (in the case of Azure).

In the Configure Endpoints/Load Balancers page, select an endpoint or load balancer and click Edit to view or edit the details. Click Delete to remove the endpoint or load balancer from the instance.