Basic AWS network setup
Creating a Virtual Private Cloud (VPC)
- Navigate to VPC Dashboard > Your VPCs > Create VPC. The Create VPC dialog box will open.
There’s a default VPC but you should always create a new VPC.
- In the Name Tag field, enter a name. For example, FortiSandbox.
- In the IPv4 CIDR field, enter 10.0.0.0/16. This will ease scale-out issues in the future.
- In the IPv6 CIDR Block field, select No.
- In the Tenancy field, select Default from the dropdown list.
- Click Yes, Create to create the new VPC.
Creating the subnet for FortiSandbox firmware
You will need to create two subnets for FortiSandbox.
- Public subnet with IPv4 CIDR 10.0.0.0/24, which is connected to the FSA-VM management interface.
- Private subnet with IPv4 CIDR 10.0.1.0/24, which is connected to all VM clones and FSA-VM.
You can skip creating Private subnet if you do not use Custom VMs. Without a Private subnet, you can still use the Remote VM for file analysis.
To create the Public Subnet:
- Click Subnets > Create Subnet. The Create Subnet dialog box will open.
- In the Name Tag field, enter a name. For example,
Public_FortiSandbox. - In the VPC field, select the VPC you have just created.
- In the IPV4 CIDR block field, enter 10.0.0.0/24 (public subnet).
- Click Yes, Create to create the new subnet.
To create the Private Subnet:
- Click Subnets > Create Subnet. The Create Subnet dialog box will open.
- In the Name Tag field, enter a name. For example, Private_FortiSandbox.
- In the VPC field, select the VPC you have just created.
- In the IPV4 CIDR block field, enter 10.0.1.0/24 (private subnet).
- Click Yes, Create to create the new subnet.
Creating an internet gateway
- Under Virtual Private Cloud, select Internet Gateways.
- Click Create Internet Gateway.
- In the Name Tag field, enter a name. For example, vpc-gw.
- Click Yes, Create.
- Once the Internet Gateway is created, click Attach to VPC.
- Select your created VPC, and click Yes, Attach.
Creating a route table
- Under Virtual Private Cloud > Route Tables > click Create Route Table. The Create Route Table dialog box will open.
- In the Name Tag field, enter a name. For example,
route_FortiSandboxTest. - In the VPC field, select the VPC you created.
- Click Yes, Create.
- Go to Subnet Associations > Edit and select the public subnet you created. Click Save.
- Go to Routes > Add Another Route.
- In the Destination field, enter
0.0.0.0/0. - In the Target field, select the internet gateway for the public subnet. Click Save.
