Administration Guide

• Introduction
  • Cloud support
  • Autoscaling
  • Managed infrastructure
  • AWS Firewall Manager integration
  • Requirements
• Getting started
  • Subscribing to FortiGate CNF
    • Subscribing through the AWS Marketplace
    • Subscribing through the Azure Marketplace
  • 30-day free trial
    • Switching from free trial to paid subscription
  • Logging in
  • FortiCloud Organization support
  • Adding AWS accounts
  • Adding Azure accounts
  • Protecting workloads with FortiGate CNF
  • Using the console
    • Banner
      • User menu
      • Online help
      • Theme selection menu
      • Account menu
    • Forms
    • Tables
    • Charts
  • Product registration and technical support
• Onboarding
• Dashboard
  • License Information
  • Annual Credits Information
  • CPU
  • Bandwidth
  • CNFs per region
  • Protected subnets
  • Memory
  • Service health dashboard
• CNF instances
  • Deploying a FortiGate CNF instance
    • Creating a new AWS FortiGate CNF instance
    • Creating a new Azure FortiGate CNF instance
    • Creating a new FortiGate CNF instance from a template
    • Adding an endpoint to an AWS instance
    • Adding an endpoint to an Azure instance
      • Editing a linked load balancer
    • Configuring policy sets
  • Editing or viewing a FortiGate CNF instance
  • Deleting a CNF instance
  • Viewing a policy set revision
  • Viewing the policy set revision diff
  • Saving a FortiGate CNF instance as template
  • Synchronizing policy sets
  • Configuring Route 53 resolver rules
  • Scheduling FortiGate CNF instance upgrades
  • FortiManager mode
    • Adding a FortiGate CNF instance to FortiManager
    • Managing a FortiGate CNF instance in FortiManager
  • FortiAnalyzer logging
  • Troubleshooting
    • Using packet capture
• Configuration
  • Policy sets
    • Creating a policy set
    • Editing or viewing a policy set
    • Deleting a policy set
  • Addresses
  • Services
  • Internet service database objects
  • Security profiles
  • CNF templates
    • Viewing template details
    • Deleting a template
    • Creating an instance from a template
  • Configuring DNS filtering on AWS
  • Configuring DNS filtering on Azure
• Cloud accounts
  • Adding an AWS account
    • Configuring Security Lake
  • Adding an Azure account
• Billing
• System
  • Audit log
    • Searching and filtering the audit log
    • Exporting the audit log
  • Tenant info
  • API keys
• Deployment scenarios
  • Distributed egress: north-south traffic Example
  • Distributed inter-subnet east-west traffic in one AZ Example
  • Distributed inter-subnet east-west traffic between AZ Example
  • Distributed inter-VPC east-west traffic Example
  • Centralized ingress: inspection before load balancer Example
  • Centralized ingress: inspection after load balancer Example
  • Centralized egress Example
  • Centralized east-west, inter-VPC Example
  • Azure ingress and egress using public IP Example
  • Azure ingress and egress using Load Balancer with public IP Example
• Using AWS Firewall Manager
• Change Log