About FortiSandbox VM for Azure

Introduction

Fortinet’s FortiSandbox on Azure enables organizations to defend against advanced threats in the cloud. It works with network, email, endpoint, and other security measures, or as an extension of on-premise security architecture to leverage scale with complete control.

FortiSandbox is available on the Azure Marketplace.

You can install FortiSandbox on Azure as a standalone zero-day threat prevention or you can configure it to work with your existing FortiGate, FortiMail, or FortiWeb Azure instances to identify malicious and suspicious files, ransomware, and network threats.

You can create custom VMs using pre-configured VMs, your own ISO image, or Red Hat VMs on VirtualBox. For more information, contact Fortinet Customer Service & Support.

This document contains images from the Microsoft Azure interface. Some images and text strings may not reflect the current Azure version. Where possible, we have noted the version the image is based on. For the most accurate Azure information, please refer to the product documentation.

License Type: BYOL and PAYG

FortiSandbox Azure supports two license types: BYOL and PAYG. With BYOL, you purchase the firmware license from Fortinet and upload it to the unit manually; With PAYG, you don’t need to bring any pre-existing licenses. Instead, you pay for both the Azure infrastructure and the software licenses as part of the service.

Guest VM Running Mode: Nested and Non-Nested

Guest VM can run in two possible modes on FortiSandbox Azure: Nested and non-nested.

A Nested Azure FortiSandbox will run guest VMs inside the appliance allowing for more control for those VMs. Nested mode also supports more types of VMs, including the Default VM, Optional VM, Customized VM and Cloud VM. A Non-Nested mode runs VMs outside the appliance. Non-nested mode only supports Customized VM and Cloud VM.

Guest VM Running mode supports Nested and Non-Nested modes for both BYOL and PAYG deployments. FortiSandbox also supports to switch between Non-Nested and Nested mode when the requirements matched.