Deploying FortiGate-VM from the marketplace

To deploy FortiGate-VM from the marketplace:

1. In the Azure marketplace, search for and select Fortinet FortiGate Next-Generation Firewall. Ensure that the listing says Azure Application.

   

2. From Select a plan, select the desired deployment plan. Click Create.
3. On the Basics tab, configure the parameters according to your requirements:
   1. From the Subscription dropdown list, select your subscription.
   2. In Resource group, select an existing resource group or create a new one.
   3. From the Region dropdown list, select the desired region.
   4. In the FortiGate administrative username and password fields, enter the username and password for the FortiGate administrative profile.
   5. In the FortiGate Name Prefix field, assign a naming prefix for your FortiGate resources.
   6. From the FortiGate Image SKU dropdown list, select bring your own license (BYOL) or pay as you go (PAYG).
   7. From the FortiGate Image Version dropdown list, select the FortiGate version to deploy.
   8. Click Next: Instance Type >.

      

4. On the Instance Type tab, select an appropriately sized instance type. Click Next: Networking >.
5. On the Networking tab, configure the parameters according to your requirements:
   1. In Virtual network, select an existing VNet or create a new one. The FortiGate-VM requires a public and private interface for internet edge protection.
   2. Enable or disable Accelerated Networking, which refers to SR-IOV support. This depends on the instance type that you selected.
   3. Click Next: Public IP >.
6. On the Public IP tab, create a new public IP address or create a new one. Click Next: Advanced >.
7. On the Advanced tab, configure the parameters according to your requirements:
   1. If you want FortiManager to manage this FortiGate, enable Connect to FortiManager and provide the FortiManager IP address and serial number in the FortiManager IP address and FortiManager Serial Number fields.
   2. To provide initial configuration to the FortiGate, enter the desired commands in the Custom Data field. Azure executes these commands during initial bootup.

      

   3. To provide a BYOL license file for the FortiGate, upload it using the FortiGate License field. Azure ignores the license file if you selected PAYG in step 3. Click Next: Review + create >.
8. Once validation completes, confirm all values, then click Create. Azure creates the resources accordingly.