Subscribing to the FortiNDR

To subscribe to the FortiNDR:

1. Go to the AWS Marketplace and search for Fortinet FortiNDR-VM-BYOL. Click Continue.
2. Click Manual Launch.
3. Click Launch with EC2 Console beside the region you want to launch.
4. Select an instance type, then click Next: Configure Instance Details.
5. Configure instance details:
   1. In the Network field, select the VPC that you created.
   2. In the Subnet field, select the public subnet.
   3. In the Network interfaces section, you will see the entry for eth0 that was created for the public subnet. Click Add Device to add another network interface (in this example, eth1), and select the private subnet. It is recommended that you assign static IP addresses.
   4. When you have two network interfaces, an EIP is not assigned automatically. You must manually assign one later. Click Review and Launch, then click Launch.
6. Select an existing key pair or create a new key pair. Select the acknowledgment checkbox. Click Launch Instances.
7. To easily identify the instance, set a name for it in the Name field.
   1. When registered FortiNDR AWS-BYOL license on https://support.fortinet.com/welcome/#/, please ensure management ip is set to 0.0.0.0 to incorporate with DHCP mode in VPC.
8. Configure an EIP:
   1. In the Network & Security menu, select Elastic IPs, then select an IP that is available for you to use or create one.
   2. Go to Actions > Associate Address. If you do not have an address that is available to use, create one.
   3. In the Resource type section, select Network Interface.
   4. In the Network interface field, select the interface ID of the network interface that you created for the public subnet (in this example, eth0).
   5. In the Private IP field, select the IP address that belongs to the public subnet. To find these values, go to the EC2 Management Console, select Instances, and select the interface in the Network interfaces section in the lower pane of the page (Interface ID and Private IP Address fields).
   6. Select Associate. A message is displayed indicating the address association was successful.

   If the Internet Gateway is not associated with a VPC, the elastic IP assignment will fail.