Version:


Table of Contents

Copy Link

Deploying FortiWeb-VM from ARM template

This section introduces how to create a FortiWeb Virtual Machine from ARM Template. FortiWeb-VM on Azure supports Cloud.init feature. You can add CLI commands in the ARM template to deploy a FortiWeb-VM with preset configurations. Refer to the description of Usr CLI Uri for how to prepare the SAS URL for the configuration file.

  1. In the Microsoft Azure Dashboard, click All services, type templates in the search box, then click Templates in the search results.
  2. Click Add.
  3. Enter a name for the template, and describe it briefly. Click OK.
  4. Delete the default provided template content.
  5. Click this link and save your file at your local directory: azure_bootstrap.json. Copy the text in this file, then paste it here. Click OK.
  6. Click Add.
  7. In the template list, click the template you just added.
  8. Click Deploy.
  9. In BASICS settings, select the desired options for Subscription, Resource group, and Location.
  10. In SETTINGS, refer to the following table to configure the settings.
    Parameter name Description
    Vm Name Prefix Specify a prefix for the FortiWeb-VM instance names.
    Vm Sku

    Specify the FortiWeb-VM instance types. To ensure high performance, it's recommended to deploy a VM instance with at least 2 vCPUs and 8 GB memory.

    If you are using BYOL licensing type, specify an instance types that matches your FortiWeb-VM licenses. For example, if your FortiWeb-VM license supports 4 vCPUs, you can choose from the instances types that have 4 vCPUs.

    The recommended instance types include:

    • Standard_F2s_v2
    • Standard_F4s_v2
    • Standard_F8s_v2
    Admin User Name Enter an administrator username for the FortiWeb instances. The username cannot be "admin" or "root".
    Admin Password

    Enter a password for the administrator account if you have chosen password for Authentication Type.

    The Azure password policy requires the password to meet at least 3 out of the 4 conditions:

    • Has lower characters
    • Has upper characters
    • Has a digit
    • Has a special character (Regex match [\W_])
    VM Pub IP New Or Existing

    Select new or existing to specify whether to use a existing public IP or create a new public IP for FortiWeb-VM.
    If you have selected new in Vnet New or Existing, it's not necessary to specify the parameter VM Pub IP RG, because the new public IP is by default created in the resource group you have specified in BASICS settings.

    VM Pub IP Name

    Enter the name of the existing public IP or a name for the new public IP.

    VM Pub IP Type

    Select the type of the public IP address.

    VM Pub IP Sku

    Select Basic or Standard. For the definition of the different SKUs, see this Azure article .

    VM Pub IP RG

    If you have selected existing public IP, specify the resource group to which the public IP belongs.

    Vnet New or Existing

    Select whether to use a new or existing virtual network.

    If you have selected new in Vnet New or Existing, it's not necessary to specify the next parameter Virtual Net Resource Group, because the new virtual network is by default created in the resource group you have specified in BASICS settings.

    Virtual Net Resource Group

    If you have selected existing virtual network, specify the resource group to which the virtual network belongs.

    Virtual Net Name Specify a name for the new virtual network, or enter the name of the existing virtual network.
    Vnet Address Prefix Specify the virtual network address prefix. For example, 10.10.0.0/16.
    Subnet1Name Specify a name for the public facing subnet.
    Subnet1Prefix Specify the prefix of the public facing subnet. For example, 10.10.0.0/24.
    Subnet2Name Specify a name for the private subnet.
    Subnet2Prefix Specify the prefix of the private subnet. For example, 10.10.1.0/24.
    Usr CLI

    Enter FortiWeb CLI commands to pre-set the VM. Separate each command line with \n.

    For example, enter the following:

    config system global\n set timezone 02\n end\n config log disk\n set severity notification\n end

    The above commands will set FortiWeb to use timezone 02 and record logs with a severity of notification or higher.

    If you want to run a large amount of CLI commands, it's more convenient to use Usr CLI Uri where you can save the commands in a file and reference this file in Usr CLI Uri.

    Usr CLI Uri

    In addition to Usr CLI, you can also use Usr CLI Uri to run FortiWeb CLI commands during deployment.

    1. Save the FortiWeb CLI commands in a .txt file.
    2. Upload the file to Azure blob in a private container.
    3. Generate SAS token and URL.
    4. Past the URL here in Usr CLI Uri.

    The commands in the file will be executed when FortiWeb-VM is deployed.

    The following is an example of the command file:

    For more information about Azure Blob, see topics under Blob Storage on Azure.

    For more information about FortiWeb CLI commands, refer to FortiWeb CLI Reference.

    Usr License Uri

    If you want to deploy a BYOL type of FortiWeb-VM, you can upload the license file to Azure blob, and paste the SAS URL here. The steps are the same as you create the SAS URL for the command file in Usr CLI Uri.

    Or, you can skip this parameter and upload the license file through FortiWeb's GUI after the deployment. Refer to Uploading license.

  11. If you plan to create more FortiWeb-VMs with the same or similar settings, it's recommended to download a template containing the above settings by clicking Edit parameters > Download.
    The next time you deploy an HA group, you can use Load file to upload the settings with one click.

  12. Click Purchase.
When you deploy the FortiWeb-VM package, network adapters are created automatically. If you want to delete network adapters, do it during the deployment process. It's not recommended to delete network adapters once the FortiWeb is deployed, otherwise unexpected error will occur.

Deploying FortiWeb-VM from ARM template

This section introduces how to create a FortiWeb Virtual Machine from ARM Template. FortiWeb-VM on Azure supports Cloud.init feature. You can add CLI commands in the ARM template to deploy a FortiWeb-VM with preset configurations. Refer to the description of Usr CLI Uri for how to prepare the SAS URL for the configuration file.

  1. In the Microsoft Azure Dashboard, click All services, type templates in the search box, then click Templates in the search results.
  2. Click Add.
  3. Enter a name for the template, and describe it briefly. Click OK.
  4. Delete the default provided template content.
  5. Click this link and save your file at your local directory: azure_bootstrap.json. Copy the text in this file, then paste it here. Click OK.
  6. Click Add.
  7. In the template list, click the template you just added.
  8. Click Deploy.
  9. In BASICS settings, select the desired options for Subscription, Resource group, and Location.
  10. In SETTINGS, refer to the following table to configure the settings.
    Parameter name Description
    Vm Name Prefix Specify a prefix for the FortiWeb-VM instance names.
    Vm Sku

    Specify the FortiWeb-VM instance types. To ensure high performance, it's recommended to deploy a VM instance with at least 2 vCPUs and 8 GB memory.

    If you are using BYOL licensing type, specify an instance types that matches your FortiWeb-VM licenses. For example, if your FortiWeb-VM license supports 4 vCPUs, you can choose from the instances types that have 4 vCPUs.

    The recommended instance types include:

    • Standard_F2s_v2
    • Standard_F4s_v2
    • Standard_F8s_v2
    Admin User Name Enter an administrator username for the FortiWeb instances. The username cannot be "admin" or "root".
    Admin Password

    Enter a password for the administrator account if you have chosen password for Authentication Type.

    The Azure password policy requires the password to meet at least 3 out of the 4 conditions:

    • Has lower characters
    • Has upper characters
    • Has a digit
    • Has a special character (Regex match [\W_])
    VM Pub IP New Or Existing

    Select new or existing to specify whether to use a existing public IP or create a new public IP for FortiWeb-VM.
    If you have selected new in Vnet New or Existing, it's not necessary to specify the parameter VM Pub IP RG, because the new public IP is by default created in the resource group you have specified in BASICS settings.

    VM Pub IP Name

    Enter the name of the existing public IP or a name for the new public IP.

    VM Pub IP Type

    Select the type of the public IP address.

    VM Pub IP Sku

    Select Basic or Standard. For the definition of the different SKUs, see this Azure article .

    VM Pub IP RG

    If you have selected existing public IP, specify the resource group to which the public IP belongs.

    Vnet New or Existing

    Select whether to use a new or existing virtual network.

    If you have selected new in Vnet New or Existing, it's not necessary to specify the next parameter Virtual Net Resource Group, because the new virtual network is by default created in the resource group you have specified in BASICS settings.

    Virtual Net Resource Group

    If you have selected existing virtual network, specify the resource group to which the virtual network belongs.

    Virtual Net Name Specify a name for the new virtual network, or enter the name of the existing virtual network.
    Vnet Address Prefix Specify the virtual network address prefix. For example, 10.10.0.0/16.
    Subnet1Name Specify a name for the public facing subnet.
    Subnet1Prefix Specify the prefix of the public facing subnet. For example, 10.10.0.0/24.
    Subnet2Name Specify a name for the private subnet.
    Subnet2Prefix Specify the prefix of the private subnet. For example, 10.10.1.0/24.
    Usr CLI

    Enter FortiWeb CLI commands to pre-set the VM. Separate each command line with \n.

    For example, enter the following:

    config system global\n set timezone 02\n end\n config log disk\n set severity notification\n end

    The above commands will set FortiWeb to use timezone 02 and record logs with a severity of notification or higher.

    If you want to run a large amount of CLI commands, it's more convenient to use Usr CLI Uri where you can save the commands in a file and reference this file in Usr CLI Uri.

    Usr CLI Uri

    In addition to Usr CLI, you can also use Usr CLI Uri to run FortiWeb CLI commands during deployment.

    1. Save the FortiWeb CLI commands in a .txt file.
    2. Upload the file to Azure blob in a private container.
    3. Generate SAS token and URL.
    4. Past the URL here in Usr CLI Uri.

    The commands in the file will be executed when FortiWeb-VM is deployed.

    The following is an example of the command file:

    For more information about Azure Blob, see topics under Blob Storage on Azure.

    For more information about FortiWeb CLI commands, refer to FortiWeb CLI Reference.

    Usr License Uri

    If you want to deploy a BYOL type of FortiWeb-VM, you can upload the license file to Azure blob, and paste the SAS URL here. The steps are the same as you create the SAS URL for the command file in Usr CLI Uri.

    Or, you can skip this parameter and upload the license file through FortiWeb's GUI after the deployment. Refer to Uploading license.

  11. If you plan to create more FortiWeb-VMs with the same or similar settings, it's recommended to download a template containing the above settings by clicking Edit parameters > Download.
    The next time you deploy an HA group, you can use Load file to upload the settings with one click.

  12. Click Purchase.
When you deploy the FortiWeb-VM package, network adapters are created automatically. If you want to delete network adapters, do it during the deployment process. It's not recommended to delete network adapters once the FortiWeb is deployed, otherwise unexpected error will occur.