Completing the prerequisites

Before deploying the Azure Resource Manager (ARM) template, complete the following prerequisites:

Creating a service principal

To create a service principal:

1. Log in to your Azure account.
2. Create a service principal. Note the following items as you need them to deploy the Function App:

   Item	Description	Relevant FortiOS parameter
   Tenant ID	You can find this item in Azure Active Directory > Properties > Directory ID. A hybrid licensing deployment does not require this item.	Tenant ID
   Application ID	You can find this item in Azure Active Directory > App registrations > (your app).	Service Principal App ID. This is the Application ID for the Registered app used as the Function App API request service principal.
   Application secret	Only appears once. You cannot retrieve the application secret.	Service Principal App Secret. This is the password (Authentication key) for the Registered app used as the Function App API request service principal.

Obtaining vWAN details

Obtain the following details about the vWAN service:

• vWAN name
• Resource group name

Creating the Remote_sites.txt file

The Remote_sites.txt file serves as the input for Azure functions. The file contains information about all sites that want to connect to vWAN. You will store the file in a storage blob. You must include the following information in the file:

• Site name (Azure uses this as an identifier)
• FortiGate public IP address
• Internal networks behind the FortiGate that need access to the vWAN
• BGP ASN and peering IP address to use
• VDOM
• Login credentials

The following is an example of the content of a Remote_Sites.txt file:

1) Tempe 51.140.67.103 10.0.11.0/24,10.0.15.0/24 azureadmin Password!234 root 169.254.24.24 7224

2) Folsom 40.115.47.140 172.31.1.0/24 azureadmin Password!234 root 169.254.24.25 7225