Deploying the CloudFormation templates
FortiGate Autoscale for AWS can be deployed:
- with Transit Gateway integration (using a new Transit Gateway or integrating with your existing Transit Gateway). This option builds a new AWS environment consisting of the VPC, subnets, security groups, and other infrastructure components. It then deploys FortiGate Autoscale into this new VPC and attaches this new VPC to the Transit Gateway.
- without Transit Gateway integration. This option allows for deployment into a new VPC or into an existing VPC.
Deployment notes
Deployment option |
Notes |
||
---|---|---|---|
with Transit Gateway integration (new VPC only) |
One inbound route domain and one outbound route domain will be created for the new or existing Transit Gateway. FortiGate Autoscale for AWS will be attached to the Transit Gateway. |
||
into an existing VPC |
|
To deploy the CloudFormation templates:
- Navigate to the S3 folder you uploaded files to in the previous section. In the following example, we navigate to Amazon S3 > fortigate-autoscale > deployment-package.
- Click templates and select the appropriate entry template to start the deployment. To deploy:
- with Transit Gateway integration, click
autoscale-tgw-new-vpc.template.yaml
- without Transit Gateway integration, click
autoscale-new-vpc.template.yaml
to deploy into a new VPC - without Transit Gateway integration, click
autoscale-existing-vpc.template.yaml
to deploy into an existing VPC
- with Transit Gateway integration, click
- Copy the Object URL of the template you picked in the previous step. In our example, the template chosen is for deploying into a new VPC.
- Click Services, and then Management & Governance > CloudFormation.
- Confirm the region you are in and then click Create Stack > With new resources (standard).
- Paste the Object URL from step 3 into the Amazon S3 URL field as shown:
- Click Next.
- On the Specify stack details page, enter a stack name and review parameters for the template, providing values for parameters that require input.