Basic AWS network setup

Creating a Virtual Private Cloud (VPC)

Navigate to VPC Dashboard > Your VPCs > Create VPC. The Create VPC dialog box will open.

There’s a default VPC but you should always create a new VPC.
In the Name Tag field, enter a name. For example, FortiSandbox.
In the IPv4 CIDR field, enter 10.0.0.0/16. This will ease scale-out issues in the future.
In the IPv6 CIDR Block field, select No.
In the Tenancy field, select Default from the dropdown list.
Click Yes, Create to create the new VPC.

Creating the subnet for FortiSandbox firmware

You will need to create two subnets for FortiSandbox.

Public subnet with IPv4 CIDR 10.0.0.0/24, which is connected to the FSA-VM management interface.
Private subnet with IPv4 CIDR 10.0.1.0/24, which is connected to all VM clones and FSA-VM.

You can skip creating Private subnet if you do not use Custom VMs. Without a Private subnet, you can still use the Remote VM for file analysis.

To create the Public Subnet:

Click Subnets > Create Subnet. The Create Subnet dialog box will open.
In the Name Tag field, enter a name. For example, Public_FortiSandbox.
In the VPC field, select the VPC you have just created.
In the IPV4 CIDR block field, enter 10.0.0.0/24 (public subnet).
Click Yes, Create to create the new subnet.

To create the Private Subnet:

Click Subnets > Create Subnet. The Create Subnet dialog box will open.
In the Name Tag field, enter a name. For example, Private_FortiSandbox.
In the VPC field, select the VPC you have just created.
In the IPV4 CIDR block field, enter 10.0.1.0/24 (private subnet).
Click Yes, Create to create the new subnet.

Creating an internet gateway

Under Virtual Private Cloud, select Internet Gateways.
Click Create Internet Gateway.
In the Name Tag field, enter a name. For example, vpc-gw.
Click Yes, Create.
Once the Internet Gateway is created, click Attach to VPC.
Select your created VPC, and click Yes, Attach.

Creating a route table

Under Virtual Private Cloud > Route Tables > click Create Route Table. The Create Route Table dialog box will open.
In the Name Tag field, enter a name. For example, route_FortiSandboxTest.
In the VPC field, select the VPC you created.
Click Yes, Create.
Go to Subnet Associations > Edit and select the public subnet you created. Click Save.
Go to Routes > Add Another Route.
In the Destination field, enter 0.0.0.0/0.
In the Target field, select the internet gateway for the public subnet. Click Save.

Basic AWS network setup

Creating a Virtual Private Cloud (VPC)

Navigate to VPC Dashboard > Your VPCs > Create VPC. The Create VPC dialog box will open.

There’s a default VPC but you should always create a new VPC.

In the Name Tag field, enter a name. For example, FortiSandbox.

In the IPv4 CIDR field, enter 10.0.0.0/16. This will ease scale-out issues in the future.

In the IPv6 CIDR Block field, select No.

In the Tenancy field, select Default from the dropdown list.

Click Yes, Create to create the new VPC.

Creating the subnet for FortiSandbox firmware

You will need to create two subnets for FortiSandbox.

Public subnet with IPv4 CIDR 10.0.0.0/24, which is connected to the FSA-VM management interface.

Private subnet with IPv4 CIDR 10.0.1.0/24, which is connected to all VM clones and FSA-VM.

You can skip creating Private subnet if you do not use Custom VMs. Without a Private subnet, you can still use the Remote VM for file analysis.

To create the Public Subnet:

Click Subnets > Create Subnet. The Create Subnet dialog box will open.

In the Name Tag field, enter a name. For example, Public_FortiSandbox.

In the VPC field, select the VPC you have just created.

In the IPV4 CIDR block field, enter 10.0.0.0/24 (public subnet).

Click Yes, Create to create the new subnet.

To create the Private Subnet:

Click Subnets > Create Subnet. The Create Subnet dialog box will open.

In the Name Tag field, enter a name. For example, Private_FortiSandbox.

In the VPC field, select the VPC you have just created.

In the IPV4 CIDR block field, enter 10.0.1.0/24 (private subnet).

Click Yes, Create to create the new subnet.

Creating an internet gateway

Under Virtual Private Cloud, select Internet Gateways.

Click Create Internet Gateway.

In the Name Tag field, enter a name. For example, vpc-gw.

Click Yes, Create.

Once the Internet Gateway is created, click Attach to VPC.

Select your created VPC, and click Yes, Attach.

Creating a route table

Under Virtual Private Cloud > Route Tables > click Create Route Table. The Create Route Table dialog box will open.

In the Name Tag field, enter a name. For example, route_FortiSandboxTest.

In the VPC field, select the VPC you created.

Click Yes, Create.

Go to Subnet Associations > Edit and select the public subnet you created. Click Save.

Go to Routes > Add Another Route.

In the Destination field, enter 0.0.0.0/0.

In the Target field, select the internet gateway for the public subnet. Click Save.

FortiSandbox VM on AWS

Basic AWS network setup