Fortinet Document Library

Version:


Table of Contents

About FortiGate for AWS

Deploying FortiGate on AWS

Deploying auto scaling on AWS

Single FortiGate-VM Deployment

Use Case: High Availability for FortiGate on AWS

Security Fabric Connector Integration with AWS

Resources

Upgrade Path Tool
6.0.0
Copy Link

Connecting to the master FortiGate-VM instance

The initial password for all FortiGate-VM instances is the instanceID of the master FortiGate-VM. For details on how to obtain the master FortiGate-VM instanceID, refer to the section Verifying the deployment.

To connect to the master FortiGate-VM instance:
  1. Look up the Auto Scaling group. For details on how to do this, refer to the section Verifying the deployment.
  2. Click the Instances tab.
  3. Click the master FortiGate-VM instance.
  4. Make note of the IPv4 Public IP in the lower pane as you will use it to construct a login URL.
  5. Construct a login URL in this way: https://<IPAddress>:<Port>/, where:
    • IPAddress refers to the IPv4 Public IP of the FortiGate-VM.
    • Port refers to the Admin port specified in the section “FortiGate-VM configuration”.
  6. Open an HTTPS session in your browser and go to the URL you just constructed.
    • Your browser will display a certificate error message. This is normal because the default FortiGate-VM certificate is self-signed and not recognized by browsers. Proceed past this error. At a later time, you can upload a publicly signed certificate to avoid this error.

    Login Disclaimer

  7. Log into the master FortiGate-VM instance with the user name admin and the <InstanceID> of the master FortiGate-VM instance as the initial password.
    • The initial password is stored in the <CustomIdentifier>-Settings-<UniqueID> table:

      Initial password

    • As the master FortiGate-VM propagates the password to all secondary FortiGate-VM instances, this is the initial password for all FortiGate-VM instances.
    • You will need this initial password if failover occurs prior to the password being changed, as the newly elected master FortiGate-VM will still have the initial password of the previous master.
  8. You are prompted to change the default password at the first-time login. It is recommended that you do so at this time.

    FortiGate change password prompt

    Note

    You should only change the password on the master FortiGate-VM instance. The master FortiGate-VM instance will propagate the password to all FortiGate-VMs in the Auto Scaling group. Any attempt to change the password on a secondary FortiGate-VM is overwritten with the primary FortiGate-VM’s password.

  9. You will now see the FortiGate-VM dashboard. The information displayed in the license widget of the dashboard depends on your license type:

    FortiGate-VM dashboard

Follow the same steps to log into any other FortiGate-VM in the Auto Scaling group as needed.

Resources

Connecting to the master FortiGate-VM instance

The initial password for all FortiGate-VM instances is the instanceID of the master FortiGate-VM. For details on how to obtain the master FortiGate-VM instanceID, refer to the section Verifying the deployment.

To connect to the master FortiGate-VM instance:
  1. Look up the Auto Scaling group. For details on how to do this, refer to the section Verifying the deployment.
  2. Click the Instances tab.
  3. Click the master FortiGate-VM instance.
  4. Make note of the IPv4 Public IP in the lower pane as you will use it to construct a login URL.
  5. Construct a login URL in this way: https://<IPAddress>:<Port>/, where:
    • IPAddress refers to the IPv4 Public IP of the FortiGate-VM.
    • Port refers to the Admin port specified in the section “FortiGate-VM configuration”.
  6. Open an HTTPS session in your browser and go to the URL you just constructed.
    • Your browser will display a certificate error message. This is normal because the default FortiGate-VM certificate is self-signed and not recognized by browsers. Proceed past this error. At a later time, you can upload a publicly signed certificate to avoid this error.

    Login Disclaimer

  7. Log into the master FortiGate-VM instance with the user name admin and the <InstanceID> of the master FortiGate-VM instance as the initial password.
    • The initial password is stored in the <CustomIdentifier>-Settings-<UniqueID> table:

      Initial password

    • As the master FortiGate-VM propagates the password to all secondary FortiGate-VM instances, this is the initial password for all FortiGate-VM instances.
    • You will need this initial password if failover occurs prior to the password being changed, as the newly elected master FortiGate-VM will still have the initial password of the previous master.
  8. You are prompted to change the default password at the first-time login. It is recommended that you do so at this time.

    FortiGate change password prompt

    Note

    You should only change the password on the master FortiGate-VM instance. The master FortiGate-VM instance will propagate the password to all FortiGate-VMs in the Auto Scaling group. Any attempt to change the password on a secondary FortiGate-VM is overwritten with the primary FortiGate-VM’s password.

  9. You will now see the FortiGate-VM dashboard. The information displayed in the license widget of the dashboard depends on your license type:

    FortiGate-VM dashboard

Follow the same steps to log into any other FortiGate-VM in the Auto Scaling group as needed.