Fortinet Document Library
Version:
7.2.0
7.0.0
6.4.0
Version:
6.2.0
Table of Contents
About FortiGate-VM for Azure
Instance type support
Region support
Models
Licensing
Order types
Creating a support account
Verifying the license type
Migrating a FortiGate-VM instance between license types
Obtaining a FortiCare-generated license for Azure on-demand instances
Deploying FortiGate-VM on Azure
Azure services and components
Deploying FortiGate-VM from a VHD image file
Deploying FortiGate with a custom ARM template
Invoking a custom ARM template
Bootstrapping the FortiGate CLI at initial bootup using user data
Bootstrapping the FortiGate CLI and BYOL license at initial bootup using user data
Deploying FortiGate-VM using Azure PowerShell
Running PowerShell to deploy FortiGate-VM
Bootstrapping the FortiGate CLI and BYOL license at initial bootup using user data
Deploying FortiGate-VM from the marketplace
Deploying FortiGate-VM on regional Azure clouds
Enabling accelerated networking on the FortiGate-VM
Upgrading FortiOS
Deploying autoscaling on Azure
Overview
Prerequisites
Obtaining the deployment package
Deploying FortiGate Autoscale for Azure
Creating a template deployment
Configurable variables
Uploading files to the Storage account
Verifying the deployment
Security features for network communication
Modifying the Autoscale settings in Cosmos DB
Starting a VMSS
Connecting to the FortiGate-VM instances
Troubleshooting
Appendix
FortiGate Autoscale for Azure features
Architectural diagrams
Replacing the FortiAnalyzer
Cloud-init
Upgrading the deployment
Document history
Single FortiGate-VM deployment
Registering and downloading your license
Deploying the FortiGate-VM
Connecting to the FortiGate-VM
Azure routing and network interfaces
Using public IP addresses
HA for FortiGate-VM on Azure
Subscribing to the FortiGate-VM
SDN connector integration with Azure
Configuring an SDN connector in Azure
Azure SDN connector service principal configuration requirements
Configuring an SDN connector using a managed identity
Configuring a managed identity on Azure
Enabling managed identities on Azure during deployment
Enabling managed identities on Azure after deployment
Access control
Configuring the managed identity on the FortiGate-VM
Configuring an Azure SDN connector for Azure resources
Azure SDN connector using ServiceTag and Region filter keys
Troubleshooting Azure SDN connector
SDN connector in Azure Kubernetes (AKS)
SDN connector in Azure Stack
VPN for FortiGate-VM on Azure
Connecting a local FortiGate to an Azure VNet VPN
Connecting a local FortiGate to an Azure FortiGate via site-to-site VPN
vWAN
vWAN architecture diagram
Creating the vWAN
Adding VNet connections to the vWAN hub
Deploying the vWAN ARM template
Completing the prerequisites
Uploading Remote_sites.txt to a storage account
Deploying the ARM template
Associating VPN sites with the vWAN hub
Verifying vWAN configuration
Configuring integration with Azure AD domain services for VPN
Configuring FortiClient VPN with multifactor authentication
Azure AD acting as SAML IdP
SAML SSO login for FortiOS administrators with Azure AD acting as SAML IdP
Configuring SAML SSO login for SSL VPN web mode with Azure AD acting as SAML IdP
Azure Sentinel
Sending FortiGate logs for analytics and queries
Home
FortiGate Public Cloud 6.4.0
Azure Administration Guide
Azure Administration Guide
About FortiGate-VM for Azure
Instance type support
Region support
Models
Licensing
Order types
Creating a support account
Verifying the license type
Migrating a FortiGate-VM instance between license types
Obtaining a FortiCare-generated license for Azure on-demand instances
Deploying FortiGate-VM on Azure
Azure services and components
Deploying FortiGate-VM from a VHD image file
Deploying FortiGate with a custom ARM template
Invoking a custom ARM template
Bootstrapping the FortiGate CLI at initial bootup using user data
Bootstrapping the FortiGate CLI and BYOL license at initial bootup using user data
Deploying FortiGate-VM using Azure PowerShell
Running PowerShell to deploy FortiGate-VM
Bootstrapping the FortiGate CLI and BYOL license at initial bootup using user data
Deploying FortiGate-VM from the marketplace
Deploying FortiGate-VM on regional Azure clouds
Enabling accelerated networking on the FortiGate-VM
Upgrading FortiOS
Deploying autoscaling on Azure
Overview
Prerequisites
Obtaining the deployment package
Deploying FortiGate Autoscale for Azure
Creating a template deployment
Configurable variables
Uploading files to the Storage account
Verifying the deployment
Security features for network communication
Modifying the Autoscale settings in Cosmos DB
Starting a VMSS
Connecting to the FortiGate-VM instances
Troubleshooting
Appendix
FortiGate Autoscale for Azure features
Architectural diagrams
Replacing the FortiAnalyzer
Cloud-init
Upgrading the deployment
Document history
Single FortiGate-VM deployment
Registering and downloading your license
Deploying the FortiGate-VM
Connecting to the FortiGate-VM
Azure routing and network interfaces
Using public IP addresses
HA for FortiGate-VM on Azure
Subscribing to the FortiGate-VM
SDN connector integration with Azure
Configuring an SDN connector in Azure
Azure SDN connector service principal configuration requirements
Configuring an SDN connector using a managed identity
Configuring a managed identity on Azure
Enabling managed identities on Azure during deployment
Enabling managed identities on Azure after deployment
Access control
Configuring the managed identity on the FortiGate-VM
Configuring an Azure SDN connector for Azure resources
Azure SDN connector using ServiceTag and Region filter keys
Troubleshooting Azure SDN connector
SDN connector in Azure Kubernetes (AKS)
SDN connector in Azure Stack
VPN for FortiGate-VM on Azure
Connecting a local FortiGate to an Azure VNet VPN
Connecting a local FortiGate to an Azure FortiGate via site-to-site VPN
vWAN
vWAN architecture diagram
Creating the vWAN
Adding VNet connections to the vWAN hub
Deploying the vWAN ARM template
Completing the prerequisites
Uploading Remote_sites.txt to a storage account
Deploying the ARM template
Associating VPN sites with the vWAN hub
Verifying vWAN configuration
Configuring integration with Azure AD domain services for VPN
Configuring FortiClient VPN with multifactor authentication
Azure AD acting as SAML IdP
SAML SSO login for FortiOS administrators with Azure AD acting as SAML IdP
Configuring SAML SSO login for SSL VPN web mode with Azure AD acting as SAML IdP
Azure Sentinel
Sending FortiGate logs for analytics and queries
6.4.0
7.2.0
7.0.0
6.4.0
6.2.0
Download PDF
Copy Link
Subscribing to the FortiGate-VM
See
Deploying FortiGate-VM from the marketplace
.
Subscribing to the FortiGate-VM
See
Deploying FortiGate-VM from the marketplace
.
Link
PDF
TOC
