About FortiGate for AWS

Deploying FortiGate on AWS

Deploying auto scaling on AWS

Single FortiGate-VM Deployment

Use Case: High Availability for FortiGate on AWS

Security Fabric Connector Integration with AWS

• Automatically updating dynamic addresses for AWS using Fabric connector
  • Configuring SDN Connector to populate dynamic objects
    • Configuring AWS SDN connector using the GUI
    • Checking the configuration using the CLI
  • Creating an address
    • Creating an address using the GUI
    • Creating an address using the CLI
    • (Connectivity test) Adding an EC2 to test automatic population
  • Creating a firewall policy
• Populating threat feeds with GuardDuty
  • Security implications
  • Parameters
  • Installation
    • Prerequisites
    • Preparing the deployment package
    • Setting up the S3 bucket
    • Setting up the DynamoDB table
    • Setting up the IAM role and policies
    • Creating the Lambda function
    • Setting up the DynamoDB stream trigger
  • Setting up CloudWatch
  • Testing the setup
  • Generating sample findings in GuardDuty (optional)
  • Setting up the FortiGate(s)
  • Cleanup
• Pipelined automation using AWS Lambda
  • Creating an automation stitch
  • Configuring an example automation stitch