Fortinet black logo

Importing the FortiWeb-VM virtual machine

Importing the FortiWeb-VM virtual machine

You deploy FortiWeb-VM on KVM (for Kernel-based Virtual Machine) by importing a disk image.

To import the FortiWeb-VM virtual machine
  1. Obtain the FortiWeb-VM installation files using the instructions provided in Downloading the FortiWeb-VM software.

    The images in the .zip file are different depending on which version you are installing.

    • v5.8.3 and earlier versions

    boot.qcow2: This image contains only the FortiWeb boot disk. You need to use this image file with 'log.qcow2' together on two virtual disks when deploying FortiWeb-VM appliance.

    log.qcow2: This image contains only the FortiWeb log disk. You need to use this image file with 'boot.qcow2' image file together on two virtual disks when deploying FortiWeb-VM appliance.

    You need to install boot.qcow2 and log.qcow2 onto two virtual disks. This will result in the FortiWeb-VM appliance having the FortiWeb boot disk on one virtual disk and the FortiWeb log disk on another.

    • v5.8.5 ~ v7.2.2

    boot.qcow2: This image contains FortiWeb boot disk as well as FortiWeb log disk. Install boot.qcow2 onto a virtual disk. The FortiWeb-VM appliance will have FortiWeb boot disk and FortiWeb log disk within the same virtual disk.

    • v7.2.3 and later versions

    If you want the FortiWeb boot disk and FortiWeb log disk to be installed onto the same virtual disk, use boot.qcow2.

    If you prefer to have the FortiWeb boot disk and FortiWeb log disk distributed across two separate virtual disks, use boot_2g.qcow2 and log.qcow2.

  2. On your KVM host server, launch Virtual Machine Manager (virt-manager), and then select Create a new virtual machine.
  3. Enter a name for the VM (for example, FortiWeb-VM).
  4. Ensure that Connection is localhost (the default value).
  5. Select Import existing disk image.

  6. Click Forward.
  7. Click Browse to navigate to boot.qcow2 or boot_2g.qcow2 and select either of them according to the image version you are using.
  8. Use the default values for OS Type and Version.

  9. Click Forward.
  10. Specify the amount of memory and number of CPUs to allocate to this virtual machine.
  11. Ensure the values do not exceed the maximums for your license.

    It is possible to configure FortiWeb-VM to use less vRAM, such as 2 GB. However, for performance reasons, Fortinet recommends that you use at least 8 GB.

    For example, if you use only 1 GB of vRAM, FortiWeb-VM cannot update its FortiGuard protection feature when Extended Virus Database is selected. (You can still update the service using the Regular Virus Database option.)

  12. Click Forward.
  13. Select Customize configuration before install.
  14. Click Finish.
  15. Optionally, to add a serial device, click Add Hardware, and then do the following:
  • Ensure Serial is selected.
  • For Device type, select TCP network console(tcp).
  • For Mode, select Server mode(bind)
  • For Host, enter 127.0.0.1.
  • For Port, enter 10301.
  • Click Finish.

This serial device allows you to connect to the CLI. Once you have a CLI connection, you can perform the basic configuration that allows you to connect to the web UI to complete your configuration tasks, or complete your configuration using the CLI only. Otherwise, use the instructions in Configuring access to FortiWeb’s web UI & CLI

  • Select the virtual disk to display its properties.
  • Under Advanced options, for Disk bus, select Virtio, and for Storage format, select qcow2.


  • Select Apply.
  • Select the virtual network interface (vNIC) and change its type to virtio.

  • Click Apply.
  • Add an additional virtual storage network (applicable only for FortiWeb-VM 5.8.3 and earlier versions or FortiWeb-VM 7.2.3 and later version).
    1. Click Add Hardware.
    2. Select Storage.
    3. Select Select managed or other existing storage.
    4. Click Browse to navigate to log.gcow2 and select it.
    5. For Device type, select Virtio disk.
    6. For Storage format, select qcow2.
    7. Click Apply.
  • To add an additional vNIC, first click Add Hardware, and then click Network.
  • For device model, select vitrio.

  • Click Finish.
  • Use the vNIC creation steps to add additional virtio vNICs. Up to 4 vNICs are supported.

  • Click Begin Installation.
  • When you deploy the FortiWeb-VM package, network adapters are created automatically. If you want to delete network adapters, do it during the deployment process. It's not recommended to delete network adapters once the FortiWeb is deployed, otherwise unexpected error will occur.

    Importing the FortiWeb-VM virtual machine

    You deploy FortiWeb-VM on KVM (for Kernel-based Virtual Machine) by importing a disk image.

    To import the FortiWeb-VM virtual machine
    1. Obtain the FortiWeb-VM installation files using the instructions provided in Downloading the FortiWeb-VM software.

      The images in the .zip file are different depending on which version you are installing.

      • v5.8.3 and earlier versions

      boot.qcow2: This image contains only the FortiWeb boot disk. You need to use this image file with 'log.qcow2' together on two virtual disks when deploying FortiWeb-VM appliance.

      log.qcow2: This image contains only the FortiWeb log disk. You need to use this image file with 'boot.qcow2' image file together on two virtual disks when deploying FortiWeb-VM appliance.

      You need to install boot.qcow2 and log.qcow2 onto two virtual disks. This will result in the FortiWeb-VM appliance having the FortiWeb boot disk on one virtual disk and the FortiWeb log disk on another.

      • v5.8.5 ~ v7.2.2

      boot.qcow2: This image contains FortiWeb boot disk as well as FortiWeb log disk. Install boot.qcow2 onto a virtual disk. The FortiWeb-VM appliance will have FortiWeb boot disk and FortiWeb log disk within the same virtual disk.

      • v7.2.3 and later versions

      If you want the FortiWeb boot disk and FortiWeb log disk to be installed onto the same virtual disk, use boot.qcow2.

      If you prefer to have the FortiWeb boot disk and FortiWeb log disk distributed across two separate virtual disks, use boot_2g.qcow2 and log.qcow2.

    2. On your KVM host server, launch Virtual Machine Manager (virt-manager), and then select Create a new virtual machine.
    3. Enter a name for the VM (for example, FortiWeb-VM).
    4. Ensure that Connection is localhost (the default value).
    5. Select Import existing disk image.

    6. Click Forward.
    7. Click Browse to navigate to boot.qcow2 or boot_2g.qcow2 and select either of them according to the image version you are using.
    8. Use the default values for OS Type and Version.

    9. Click Forward.
    10. Specify the amount of memory and number of CPUs to allocate to this virtual machine.
    11. Ensure the values do not exceed the maximums for your license.

      It is possible to configure FortiWeb-VM to use less vRAM, such as 2 GB. However, for performance reasons, Fortinet recommends that you use at least 8 GB.

      For example, if you use only 1 GB of vRAM, FortiWeb-VM cannot update its FortiGuard protection feature when Extended Virus Database is selected. (You can still update the service using the Regular Virus Database option.)

    12. Click Forward.
    13. Select Customize configuration before install.
    14. Click Finish.
    15. Optionally, to add a serial device, click Add Hardware, and then do the following:
    • Ensure Serial is selected.
    • For Device type, select TCP network console(tcp).
    • For Mode, select Server mode(bind)
    • For Host, enter 127.0.0.1.
    • For Port, enter 10301.
    • Click Finish.

    This serial device allows you to connect to the CLI. Once you have a CLI connection, you can perform the basic configuration that allows you to connect to the web UI to complete your configuration tasks, or complete your configuration using the CLI only. Otherwise, use the instructions in Configuring access to FortiWeb’s web UI & CLI

  • Select the virtual disk to display its properties.
  • Under Advanced options, for Disk bus, select Virtio, and for Storage format, select qcow2.


  • Select Apply.
  • Select the virtual network interface (vNIC) and change its type to virtio.

  • Click Apply.
  • Add an additional virtual storage network (applicable only for FortiWeb-VM 5.8.3 and earlier versions or FortiWeb-VM 7.2.3 and later version).
    1. Click Add Hardware.
    2. Select Storage.
    3. Select Select managed or other existing storage.
    4. Click Browse to navigate to log.gcow2 and select it.
    5. For Device type, select Virtio disk.
    6. For Storage format, select qcow2.
    7. Click Apply.
  • To add an additional vNIC, first click Add Hardware, and then click Network.
  • For device model, select vitrio.

  • Click Finish.
  • Use the vNIC creation steps to add additional virtio vNICs. Up to 4 vNICs are supported.

  • Click Begin Installation.
  • When you deploy the FortiWeb-VM package, network adapters are created automatically. If you want to delete network adapters, do it during the deployment process. It's not recommended to delete network adapters once the FortiWeb is deployed, otherwise unexpected error will occur.