Introduction

This document will guide you through a deployment of the Fortinet Secure SD-WAN Solution that consists of fully functional FortiGate (FGT) devices deployed on every site and centrally managed by FortiManager (FMG) and FortiAnalyzer (FAZ).

Our aim is to present an approach with the following important characteristics:

• Generic: suitable for a wide variety of topologies with a mix of different site types
• Flexible: allows (but not requires!) every detail to be customized
• Reusable: provides a high degree of similarity (and re-usability) between different projects
• Automation-friendly: suitable for fully automated provisioning using REST API
• IaC-friendly: includes plain-text project descriptions in a declarative (also considered implementation-agnostic) language, which is both human and machine-readable, and allows for easy review, traceability, version control, and more

This approach is recommended for Managed Service Providers, who are the main target audience for this document. However, this approach may benefit any type of customer looking for the characteristics mentioned above.

This document contains the following topics:

• Deployment overview
• Design overview
• Preparing Jinja templates
• Building a project foundation in FortiManager
• Deploying sites
• Additional topics