Fortinet Document Library

Version:


Table of Contents

Azure Administration Guide

7.0.0
Download PDF
Copy Link

Single FortiGate-VM deployment

You can deploy FortiGate-VM NGFW for Azure as a virtual appliance in the Azure cloud (IaaS). This section shows you how to install and configure a single instance FortiGate-VM in Azure to provide a full NGFW/unified threat management (UTM) security solution in front of Azure IaaS resources.

This section covers the deployment of simple web servers, but you can use this deployment type for any type of public resource protection with only slight modifications. With this architecture as a starting point, you can implement more advanced solutions, including multitiered solutions.

The example in this document creates three subnets:

Subnet

Description

Subnet1

External subnet used to connect the FortiGate-VM to the Internet.

Subnet2

Internal subnet used as a transit network to one or multiple protected networks containing backend services, such as the web server.

Subnet3

Protected subnet used to deploy services. You can deploy multiples of these subnets. The traffic is sent to the FortiGate for inspection using UDR.

Single FortiGate-VM deployment

You can deploy FortiGate-VM NGFW for Azure as a virtual appliance in the Azure cloud (IaaS). This section shows you how to install and configure a single instance FortiGate-VM in Azure to provide a full NGFW/unified threat management (UTM) security solution in front of Azure IaaS resources.

This section covers the deployment of simple web servers, but you can use this deployment type for any type of public resource protection with only slight modifications. With this architecture as a starting point, you can implement more advanced solutions, including multitiered solutions.

The example in this document creates three subnets:

Subnet

Description

Subnet1

External subnet used to connect the FortiGate-VM to the Internet.

Subnet2

Internal subnet used as a transit network to one or multiple protected networks containing backend services, such as the web server.

Subnet3

Protected subnet used to deploy services. You can deploy multiples of these subnets. The traffic is sent to the FortiGate for inspection using UDR.