Fortinet Document Library

Version:


Table of Contents

About FortiGate for AWS

Deploying FortiGate on AWS

Deploying auto scaling on AWS

Single FortiGate-VM Deployment

Use Case: High Availability for FortiGate on AWS

Security Fabric Connector Integration with AWS

Resources

Upgrade Path Tool
6.0.0
Copy Link

Subscribing to the FortiGate

This section shows you how to subscribe to and configure the FortiGate-VM.

  1. Go to the AWS Marketplace's page for Fortinet FortiGate-VM (BYOL) or FortiGate-VM (PAYG). Select Continue.

  2. Select Manual Launch.

  3. Select Launch with EC2 Console beside the Region you want to launch.

  4. Select an Instance Type, then select Next: Configure Instance Details.

  5. Configure instance details:
    1. In the Network field, select the VPC that you created.
    2. In the Subnet field, select the public subnet.
    3. In the Network interfaces section, you will see the entry for eth0 that was created for the public subnet. Select Add Device to add another network interface (in this example, eth1), and select the private subnet. It is recommended that you assign static IP addresses.
    4. When you have two network interfaces, an elastic IP address is not assigned automatically. You must manually assign one later. Select Review and Launch, then select Launch.

  6. Select an existing key pair or create a new key pair. Select the acknowledgment checkbox. Select Launch Instances.

  7. To easily identify the instance, set a name for it in the Name field.

  8. In the Network & Security menu, select Elastic IPs, then select one that is available for you to use or create one. Select Actions > Associate Address. If you don't have one available to use, create one.

  9. In the Resource type section, select Network Interface.
  10. In the Network interface field, select the Interface ID of the network interface that you created for the public subnet (in this example, eth0). In the Private IP field, select the IP address that belongs to the public subnet. To find these values, go to the EC2 Management Console, select Instances, and select the interface in the Network interfaces section in the lower pane of the page (Interface ID and Private IP Address fields). Select Associate. A message is displayed indicating the address association was successful. Note that if the Internet Gateway isn't associated with a VPC, the elastic IP assignment will fail.

Resources

Subscribing to the FortiGate

This section shows you how to subscribe to and configure the FortiGate-VM.

  1. Go to the AWS Marketplace's page for Fortinet FortiGate-VM (BYOL) or FortiGate-VM (PAYG). Select Continue.

  2. Select Manual Launch.

  3. Select Launch with EC2 Console beside the Region you want to launch.

  4. Select an Instance Type, then select Next: Configure Instance Details.

  5. Configure instance details:
    1. In the Network field, select the VPC that you created.
    2. In the Subnet field, select the public subnet.
    3. In the Network interfaces section, you will see the entry for eth0 that was created for the public subnet. Select Add Device to add another network interface (in this example, eth1), and select the private subnet. It is recommended that you assign static IP addresses.
    4. When you have two network interfaces, an elastic IP address is not assigned automatically. You must manually assign one later. Select Review and Launch, then select Launch.

  6. Select an existing key pair or create a new key pair. Select the acknowledgment checkbox. Select Launch Instances.

  7. To easily identify the instance, set a name for it in the Name field.

  8. In the Network & Security menu, select Elastic IPs, then select one that is available for you to use or create one. Select Actions > Associate Address. If you don't have one available to use, create one.

  9. In the Resource type section, select Network Interface.
  10. In the Network interface field, select the Interface ID of the network interface that you created for the public subnet (in this example, eth0). In the Private IP field, select the IP address that belongs to the public subnet. To find these values, go to the EC2 Management Console, select Instances, and select the interface in the Network interfaces section in the lower pane of the page (Interface ID and Private IP Address fields). Select Associate. A message is displayed indicating the address association was successful. Note that if the Internet Gateway isn't associated with a VPC, the elastic IP assignment will fail.