Configuring FortiWeb-VM

After autoscaling resources are deployed, the function APP elects a server instance. All clients will continuously communicate with the elected server. The server later will periodically synchronize its configuration to all the clients.

When a new instance joins the cluster, it automatically inherits configuration from the server instance.

The autoscaling options on FortiWeb are automatically configured. You can view or change the configurations through System > HA Cluster > Manager Cluster on GUI or run config system manager-mode in CLI.

Refer to the following steps on how to direct web traffic to FortiWeb for threat detection. Please note that we only introduce very basic options here. For information on other options such as the web protection profile, please see FortiWeb Administration Guide.

You only need to configure the settings on the server instance. They will be automatically synchronized to all the client instances.

Configuring virtual server

1. Log in to the primary FortiWeb-VM. Click Server objects > Server > Virtual Server.
2. Click Create to create a virtual server. Enter a name for the virtual server. Click OK.
3. Click Create New to create a new virtual server item. Enable Use Interface IP , then select port1. Click OK.
   
   

Configuring server pool

Click Server objects > Server > Server Pool. Create a server pool and add your application server in the pool.

Configuring server policy

Click Server Policy > Policy to create a server policy. In the policy, select the virtual server and the server pool you just created. Select HTTP for HTTP Service option.

Testing connections

1. Log in to AWS.
2. Select Load Balancers in EC2 service.
3. Find the load balancers you have created. Take note of its DNS name .
   
   
4. Enter the address in a web browser, for example, xxxxx.amazonaws.com:80. The homepage your application should appear.

For more information on how to configure the above settings, see FortiWeb Administration Guide.

To configure the autoscaling options on FortiWeb, see config system manager-mode in FortiWeb CLI Reference.