About FortiGate for VMware NSX-T
Fortinet's FortiGate-VM is a next generation firewall virtual appliance for VMware environments that provides purpose-built integration for VMware's Software-Defined Data Center (SDDC) and interoperability with NSX-T through service insertion as a third-party edge firewall. FortiGate-VM provides protection of north/south traffic flow inside the VMware NSX-T environment.
FortiGate-VM 6.2.1 (special build) is certified for use with NSX-T 2.4.1+ and 2.5.0+ as a firewall node for north-south edge service insertion or east-west serve chaining. 2.5.0+ east-west support is planned for a future release.
NSX-T fully supports ESXi and KVM as hypervisor platforms. An edge firewall is supported on ESXi only (not KVM), meaning that you need FortiGate-/FortiManager-VM deployment images for ESXi.
Starting with NSX-T 2.4.1, the VMware-certified Fortinet solution requires a paired deployment of FortiManager (physical appliance or VM) and FortiGate-VM. Use supported versions for both products to integrate to a specific NSX-T version. You can find supported version information in the VMware Compatibility Guide.
FortiGate-VM alone can work with NSX-T as a firewall node. However, FortiGate single product deployment has not been certified with NSX-T.