Fortinet white logo
Fortinet white logo

Azure vWAN SD-WAN NGFW Deployment Guide

7.2.0

Prerequisites for SD-WAN configuration

Prerequisites for SD-WAN configuration

After the FortiGate NVAs for the vWAN hub and FortiGate units for branch locations are configured and managed by FortiManager, you are ready to use FortiManager to configure a new SD-WAN region. FortiGate NVAs are the hub, and branch FortiGates are the spokes in the SD-WAN configuration.

Following are the prerequisites to configure SD-WAN:

  • FortiGate NVAs for the vWAN hub and FortiGate units for the branch locations have been added to FortiManager as managed devices.
    • The FortiGate units have an active connection to FortiManager.
  • vWAN FortiGate NVAs have a default configured for the external port.
    • In this document, port1 is the external port.
  • ISP links and other interfaces have been configured on all devices.
    • ISP routing is configured where branches have proper routes to reach the FortiGate NVAs for the vWAN hub.
    • LAN and other directly connected networks have been assigned.

Prerequisites for SD-WAN configuration

Prerequisites for SD-WAN configuration

After the FortiGate NVAs for the vWAN hub and FortiGate units for branch locations are configured and managed by FortiManager, you are ready to use FortiManager to configure a new SD-WAN region. FortiGate NVAs are the hub, and branch FortiGates are the spokes in the SD-WAN configuration.

Following are the prerequisites to configure SD-WAN:

  • FortiGate NVAs for the vWAN hub and FortiGate units for the branch locations have been added to FortiManager as managed devices.
    • The FortiGate units have an active connection to FortiManager.
  • vWAN FortiGate NVAs have a default configured for the external port.
    • In this document, port1 is the external port.
  • ISP links and other interfaces have been configured on all devices.
    • ISP routing is configured where branches have proper routes to reach the FortiGate NVAs for the vWAN hub.
    • LAN and other directly connected networks have been assigned.