Configuring Azure basic settings
FortiWeb Manager for Azure is a Linux virtual machine instance. To deploy the FortiWeb Manager-VM, it's required to set up resource group, storage account, and container. If you already have them, you can skip this step.
Azure Services and Components
The following lists Azure services and components required to be understood before deploying FortiWeb Manager-VM.
You need an Azure account to access the Windows Azure services and to the Windows Azure Platform Management Portal.
You can create multiple subscriptions in one Azure accounts and grant them different access permissions to the resources and services in this Azure accounts. By default, when you create an Azure account, a subscription is automatically created.
A manageable item that is available through Azure. Some common resources are a virtual machine, storage account, web app, database, and virtual network, but there are many more.
A container that holds related resources for an Azure solution. The resource group can include all the resources for the solution, or only those resources that you want to manage as a group. You decide how you want to allocate resources to resource groups based on what makes the most sense for your organization.
It is a Microsoft-managed service providing cloud storage that is highly available, secure, durable, scalable, and redundant. Azure Storage includes Azure Blobs (objects), Azure Data Lake Storage Gen2, Azure Files, Azure Queues, and Azure Tables.
All access to data objects in Azure Storage happens through a storage account.
Azure Blob storage
It is Microsoft's object storage solution for the cloud. Blob storage is optimized for storing massive amounts of unstructured data, such as text or binary data.
A container organizes a set of blobs, similar to a folder in a file system. All blobs reside within a container. A storage account can contain an unlimited number of containers, and a container can store an unlimited number of blobs.
The following diagram shows the relationship between the storage account, container, and blob.
Creating a resource group
- Log in to Microsoft Azure portal, click All services, and then enter resource groups in the search box. Click Resource groups in the search results.
- Click Add. On the Resource group page, enter a name for the resource group, choose the subscription and resource group location. Click Create.
If you want to assign a new subscription to this resource group, first create a new subscription at this page.
Creating a storage account
- Click All services, and then enter storage accounts in the search box. Click storage accounts in the search results.
- Click Add. On the Create storage account pane, choose the subscription and the resource group you have created, and then set the Instance Details settings according to your own needs. Click Next : Advanced.
- Configure the Advanced settings:
- Security: It's recommended to enable Secure transfer required so that only the requests through secure connection are allowed.
Virtual Networks: it's recommended to choose All networks to ensure the image file can be successfully uploaded from your local directory to the container in this storage account.
- Click Next : Tags to go to the Tags settings. For easier management, it's recommended to attach a tag so that you can retrieve all the resources in your subscription with the same tag name and value.
- Create Review + create to review the settings.
- If you have nothing to modify, click Create to create the storage account.
Creating a container
- In the Storage accounts portal, find the storage account you just created. Click the account name.
- Under the Services section, click Blobs.
- Click Container to add a container.
- Enter a name for the container. It's not allowed to contain uppercase letters in the name. Choose Container (anonymous read access for containers and blobs). Click OK to create a container.