Use Case: High Availability for FortiGate on AWS

• Overview
  • FortiGate-Native Active-Passive HA
  • ELB-based HA/load-balancing
• Deploying and configuring FortiGate-VM active-active HA
• Deploying and configuring FortiGate A-P HA
  • CFTs and connecting to FortiGates
    • VPC configuration
    • FortiGate instance configuration
    • Interface IP configuration for FortiGates A and B
    • Interface IP configuration for the cluster
    • Deployment
  • Configuring active-passive HA in the CLI
  • Reviewing the network failover diagram
  • Checking the prerequisites
  • (Connectivity test) Configuring a FortiGate firewall policy
  • (Failover test) Shutting down FortiGate A
  • FAQ and troubleshooting
• Deploying and configuring ELB-based HA/load balancing
  • Creating two subnets on your VPC
  • Creating a security group for the FortiGate-VM
  • Allocating elastic IPs for the FortiGate and for public access
  • Deploying the FortiGate-VM
  • Assigning an IP to the FortiGate-VM
  • Creating a default route
  • Configuring the FortiGate-VM
  • Deploying the Windows Server
  • Creating a second subnet and deploying a second FortiGate-VM
  • Creating an ELB between the FortiGate-VMs
  • Results