Fortinet Document Library

Version:


Table of Contents

About FortiGate for Azure

Deploying FortiGate on Azure

Deploying auto scaling on Azure

Single FortiGate-VM Deployment

Use case: High availability for FortiGate on Azure

Use case: Automatically updating dynamic addresses using Fabric connector

Resources

Upgrade Path Tool
6.0.0
Copy Link

Subscribing the FortiGate-VM

  1. In the Microsoft Azure Dashboard, select Create a resource and search for FortiGate.

  2. Select the option FortiGate NGFW - Single VM and click Create.

  3. Configure the parameters according to your requirements:
    1. Under PAYG/BYOL License, select the license type. PAYG is billed through Azure as an additional charge to compute usage.
    2. Create a new resource group or select an existing, empty resource group. For Marketplace template solutions, Azure only allows using new or empty resource groups. If you need to deploy to an existing resource group, you must deploy the template using another method. (After filling in the parameters, you are given an option to download the template file to repurpose). It is possible to deploy to a new resource group and still use an existing VNet in another resource group. Click OK.

    3. Under Network and Instance Settings, you can deploy to an existing VNet or create a new one. If deploying to an existing VNet, you must already have two subnets to use for the FortiGate-VM. The FortiGate-VM requires a public and private interface for Internet edge protection.

    4. Under Virtual machine size, select the instance type according to the purchased BYOL license or the cost per hour as anticipated. Licensing is based on the number of utilized vCPUs. You can resize the VM later if needed. Click OK.

    5. Under IP Assignment, create a new public IP address or choose an existing one. Click OK.

  4. You are finished configuring the parameters. Once validation is passed, click OK.

    note icon

    If you want to download the template, click Download template and parameters.

  5. Click Create.

  6. After deploying the template, you should see new resources as shown:

Resources

Subscribing the FortiGate-VM

  1. In the Microsoft Azure Dashboard, select Create a resource and search for FortiGate.

  2. Select the option FortiGate NGFW - Single VM and click Create.

  3. Configure the parameters according to your requirements:
    1. Under PAYG/BYOL License, select the license type. PAYG is billed through Azure as an additional charge to compute usage.
    2. Create a new resource group or select an existing, empty resource group. For Marketplace template solutions, Azure only allows using new or empty resource groups. If you need to deploy to an existing resource group, you must deploy the template using another method. (After filling in the parameters, you are given an option to download the template file to repurpose). It is possible to deploy to a new resource group and still use an existing VNet in another resource group. Click OK.

    3. Under Network and Instance Settings, you can deploy to an existing VNet or create a new one. If deploying to an existing VNet, you must already have two subnets to use for the FortiGate-VM. The FortiGate-VM requires a public and private interface for Internet edge protection.

    4. Under Virtual machine size, select the instance type according to the purchased BYOL license or the cost per hour as anticipated. Licensing is based on the number of utilized vCPUs. You can resize the VM later if needed. Click OK.

    5. Under IP Assignment, create a new public IP address or choose an existing one. Click OK.

  4. You are finished configuring the parameters. Once validation is passed, click OK.

    note icon

    If you want to download the template, click Download template and parameters.

  5. Click Create.

  6. After deploying the template, you should see new resources as shown: