Fortinet Document Library

Version:


Table of Contents

FortiSandbox VM on AWS

3.1.0
Download PDF
Copy Link

Setting up basic AWS network

Creating a Virtual Private Cloud (VPC)

  1. Go to VPC Dashboard > Your VPCs and click Create VPC.

    note icon

    Create a new VPC even though there is a default VPC.

  2. Enter the following information, then click Yes, Create.
    • For Name tag, enter a name. For example, FortiSandbox.
    • For IPv4 CIDR block, enter 10.0.0.0/16. This helps ease scale-out issues in the future.
    • For IPv6 CIDR block, select No IPv6 CIDR Block.
    • For Tenancy, select Default.

Creating the subnet for FortiSandbox firmware

Create subnets for FortiSandbox.

If you do not use Custom VMs, you don't have to create a private subnet. Even without a private subnet, you can still use the remote VM for file analysis.

  • Public subnet with IPv4 CIDR 10.0.0.0/24, which is connected to the FSA-VM management interface.
  • Private subnet with IPv4 CIDR 10.0.1.0/24, which is connected to all VM clones and FSA-VM.
To create the public subnet:
  1. Click Subnets > Create Subnet.
  2. In the Create Subnet dialog box, enter the following information, then click Yes, Create.
    • For Name tag, enter a name. For example, Public_FortiSandbox.
    • For VPC, select the VPC you just created.
    • For IPV4 CIDR block, enter 10.0.0.0/24 (public subnet).

To create the private subnet:
  1. Click Subnets > Create Subnet.
  2. In the Create Subnet dialog box, enter the following information, then click Yes, Create.
    • For Name tag, enter a name. For example, Private_FortiSandbox.
    • For VPC, select the VPC you just created.
    • For IPV4 CIDR block, enter 10.0.1.0/24 (private subnet).

Creating an internet gateway

  1. Under Virtual Private Cloud > Internet Gateways, click Create Internet Gateway.
  2. For Name tag, enter a name. For example, vpc-gw and click Yes, Create.

  3. When the Internet Gateway is created, click Attach to VPC.
  4. Select the VPC and click Yes, Attach.

Creating a route table

  1. Under Virtual Private Cloud > Route Tables, click Create Route Table.

  2. In the Create Route Table dialog box, enter the following information, then click Yes, Create.
    • For Name tag, enter a name. For example, route_FortiSandboxTest.
    • For VPC, select the VPC you created.

  3. Go to Subnet Associations > Edit, select the public subnet you created, then click Save.

  4. Go to Routes > Add Another Route, enter the following information, then click Save.
    • For Destination, enter 0.0.0.0/0.
    • For Target, select the internet gateway for the public subnet.

Creating a security group

  1. Under Virtual Private Cloud > Security Groups, click Create security group.
  2. Enter the following information, then click Create.
    • For Security group name, enter a name.
    • For Description, enter a description.
    • For VPC, select the VPC you just created.

  3. Configure the following:

    Details

    Value

    Type

    All Traffic.

    You can select TCP.

    Protocol

    All.

    You can select TCP.

    Port Range

    If you select All for Protocol the Port Range is automatically selected.

    If you select TCP, select one of the following:

    • TCP/514
    • TCP/1344
    • TCP/11344

    Source

    Custom.

    For the SourceIP, enter 0.0.0.0/0.

Setting up basic AWS network

Creating a Virtual Private Cloud (VPC)

  1. Go to VPC Dashboard > Your VPCs and click Create VPC.

    note icon

    Create a new VPC even though there is a default VPC.

  2. Enter the following information, then click Yes, Create.
    • For Name tag, enter a name. For example, FortiSandbox.
    • For IPv4 CIDR block, enter 10.0.0.0/16. This helps ease scale-out issues in the future.
    • For IPv6 CIDR block, select No IPv6 CIDR Block.
    • For Tenancy, select Default.

Creating the subnet for FortiSandbox firmware

Create subnets for FortiSandbox.

If you do not use Custom VMs, you don't have to create a private subnet. Even without a private subnet, you can still use the remote VM for file analysis.

  • Public subnet with IPv4 CIDR 10.0.0.0/24, which is connected to the FSA-VM management interface.
  • Private subnet with IPv4 CIDR 10.0.1.0/24, which is connected to all VM clones and FSA-VM.
To create the public subnet:
  1. Click Subnets > Create Subnet.
  2. In the Create Subnet dialog box, enter the following information, then click Yes, Create.
    • For Name tag, enter a name. For example, Public_FortiSandbox.
    • For VPC, select the VPC you just created.
    • For IPV4 CIDR block, enter 10.0.0.0/24 (public subnet).

To create the private subnet:
  1. Click Subnets > Create Subnet.
  2. In the Create Subnet dialog box, enter the following information, then click Yes, Create.
    • For Name tag, enter a name. For example, Private_FortiSandbox.
    • For VPC, select the VPC you just created.
    • For IPV4 CIDR block, enter 10.0.1.0/24 (private subnet).

Creating an internet gateway

  1. Under Virtual Private Cloud > Internet Gateways, click Create Internet Gateway.
  2. For Name tag, enter a name. For example, vpc-gw and click Yes, Create.

  3. When the Internet Gateway is created, click Attach to VPC.
  4. Select the VPC and click Yes, Attach.

Creating a route table

  1. Under Virtual Private Cloud > Route Tables, click Create Route Table.

  2. In the Create Route Table dialog box, enter the following information, then click Yes, Create.
    • For Name tag, enter a name. For example, route_FortiSandboxTest.
    • For VPC, select the VPC you created.

  3. Go to Subnet Associations > Edit, select the public subnet you created, then click Save.

  4. Go to Routes > Add Another Route, enter the following information, then click Save.
    • For Destination, enter 0.0.0.0/0.
    • For Target, select the internet gateway for the public subnet.

Creating a security group

  1. Under Virtual Private Cloud > Security Groups, click Create security group.
  2. Enter the following information, then click Create.
    • For Security group name, enter a name.
    • For Description, enter a description.
    • For VPC, select the VPC you just created.

  3. Configure the following:

    Details

    Value

    Type

    All Traffic.

    You can select TCP.

    Protocol

    All.

    You can select TCP.

    Port Range

    If you select All for Protocol the Port Range is automatically selected.

    If you select TCP, select one of the following:

    • TCP/514
    • TCP/1344
    • TCP/11344

    Source

    Custom.

    For the SourceIP, enter 0.0.0.0/0.