Fortinet Document Library

Version:


Table of Contents

About FortiGate for Azure

Deploying FortiGate on Azure

Deploying auto scaling on Azure

Single FortiGate-VM Deployment

Use case: High availability for FortiGate on Azure

Use case: Automatically updating dynamic addresses using Fabric connector

Resources

Upgrade Path Tool
6.0.0
Copy Link

Introduction

You can deploy FortiGate virtual machines to support autoscaling on Azure. This requires a manual deployment incorporating a Virtual Machine Scale Set (VMSS) and networking related components, as well as Azure Function App scripts. Fortinet provides a FortiGate Autoscale for Azure deployment package to facilitate the deployment.

Multiple FortiGate-VM instances form an Auto Scaling group (ASG) to provide highly efficient clustering at times of high workloads. FortiGate-VM instances are scaled out automatically according to predefined workload levels. Auto Scaling is achieved by using FortiGate-native high availability (HA) features such as config-sync, which synchronizes operating system (OS) configurations across multiple FortiGate-VM instances at the time of scale-out events.

FortiGate Autoscale for Azure is available with FortiOS 6.0.6 and later versions and supports two deployment options:

  • On-Demand (PAYG) instances only
  • PAYG and Bring Your Own License (BYOL) instances (hybrid licensing)

Installing and configuring FortiGate Autoscale for Azure requires knowledge of the following:

  • Configuring a FortiGate using the CLI
  • Azure deployment templates
  • Azure Functions
  • The Azure CLI (optional if only deploying PAYG instances)

It is expected that FortiGate Autoscale for Azure will be deployed by DevOps engineers or advanced system administrators who are familiar with the above.

Resources

Introduction

You can deploy FortiGate virtual machines to support autoscaling on Azure. This requires a manual deployment incorporating a Virtual Machine Scale Set (VMSS) and networking related components, as well as Azure Function App scripts. Fortinet provides a FortiGate Autoscale for Azure deployment package to facilitate the deployment.

Multiple FortiGate-VM instances form an Auto Scaling group (ASG) to provide highly efficient clustering at times of high workloads. FortiGate-VM instances are scaled out automatically according to predefined workload levels. Auto Scaling is achieved by using FortiGate-native high availability (HA) features such as config-sync, which synchronizes operating system (OS) configurations across multiple FortiGate-VM instances at the time of scale-out events.

FortiGate Autoscale for Azure is available with FortiOS 6.0.6 and later versions and supports two deployment options:

  • On-Demand (PAYG) instances only
  • PAYG and Bring Your Own License (BYOL) instances (hybrid licensing)

Installing and configuring FortiGate Autoscale for Azure requires knowledge of the following:

  • Configuring a FortiGate using the CLI
  • Azure deployment templates
  • Azure Functions
  • The Azure CLI (optional if only deploying PAYG instances)

It is expected that FortiGate Autoscale for Azure will be deployed by DevOps engineers or advanced system administrators who are familiar with the above.