About FortiGate for VMware NSX-T

Fortinet's FortiGate-VM is a next generation firewall virtual appliance for VMware environments that provides purpose-built integration for VMware's Software-Defined Data Center (SDDC) and interoperability with NSX-T through service insertion as a third-party edge firewall. FortiGate-VM provides protection of north/south and east/west traffic flow inside the VMware NSX-T environment.

FortiGate-VM 6.4.3 is certified for a new deployment with NSX-3.0.0.1+ and 3.1.0+ as a firewall node for north-south edge service insertion or east-west service chaining. Upgrade to FortiOS 6.4.4 and later versions is supported.

NSX-T fully supports ESXi and KVM as hypervisor platforms. Only ESXi only (not KVM) supports an edge firewall, meaning that you need FortiGate-VM deployment images for ESXi.

The VMware-certified Fortinet solution requires a paired deployment of FortiManager (physical appliance or VM) and FortiGate-VM. Use supported versions for both products to integrate to a specific NSX-T version. You can find supported version information in the VMware Compatibility Guide.

FortiGate-VM alone can work with NSX-T as a firewall node. However, FortiGate single product deployment has not been certified with NSX-T.