Azure Administration Guide

• About FortiGate-VM for Azure
  • Instance type support
  • Region support
  • Models
  • Licensing
    • Order types
    • Creating a support account
      • BYOL
      • PAYG
• Deploying FortiGate-VM on Azure
  • Azure services and components
  • Deploying FortiGate-VM from a VHD image file
  • Deploying FortiGate with a custom ARM template
    • Invoking a custom ARM template
    • Bootstrapping the FortiGate CLI at initial bootup using user data
    • Bootstrapping the FortiGate CLI and BYOL license at initial bootup using user data
  • Deploying FortiGate-VM using Azure PowerShell
    • Running PowerShell to deploy FortiGate-VM
    • Bootstrapping the FortiGate CLI and BYOL license at initial bootup using user data
  • Deploying FortiGate-VM on regional Azure clouds
  • Deploying FortiGate-VM from the marketplace
  • Enabling accelerated networking on the FortiGate-VM
  • Upgrading FortiOS
• Single FortiGate-VM deployment
  • Registering and downloading your license
  • Subscribing to the FortiGate-VM
  • Connecting to the FortiGate-VM
  • Network interfaces and routes
  • Using public IP addresses
• HA for FortiGate-VM on Azure
  • Subscribing to the FortiGate-VM
• Deploying FortiGate-VM using Terraform
• Security Fabric connector integration with Azure
  • Configuring a Fabric connector in Azure
    • Creating an Azure Fabric connector using service principal
    • Creating a Fabric connector using a managed identity
      • Configuring a managed identity on Azure
        • Enabling managed identities on Azure during deployment
        • Enabling managed identities on Azure after deployment
        • Access control
      • Configuring the managed identity on the FortiGate-VM
    • Creating an address
    • Dynamic address in a policy
    • Troubleshooting Azure Fabric connector
  • Fabric connector in Azure Kubernetes (AKS)
• Fabric connector in Azure Stack
• VPN for FortiGate-VM on Azure
  • Connecting a local FortiGate to an Azure VNet VPN
  • Connecting a local FortiGate to an Azure FortiGate via site-to-site VPN
  • vWAN
    • vWAN architecture diagram
    • Creating the vWAN
    • Adding VNet connections to the vWAN hub
    • Deploying the vWAN ARM template
      • Completing the prerequisites
      • Uploading Remote_sites.txt to a storage account
      • Deploying the ARM template
    • Associating VPN sites with the vWAN hub
    • Verifying vWAN configuration
  • Configuring integration with Azure AD domain services for VPN
  • Configuring FortiClient VPN with multifactor authentication
• Azure AD acting as SAML IdP
  • SAML SSO login for FortiOS administrators with Azure AD acting as SAML IdP
  • Configuring SAML SSO login for SSL VPN with Azure AD acting as SAML IdP
• Azure Sentinel
  • Sending FortiGate logs for analytics and queries