GCP Administration Guide

• About FortiGate-VM for GCP
  • Machine type support
    • Upgrading or downgrading a GCP instance to another machine type
  • Models
  • Licensing
    • Order types
    • Creating a support account
    • Migrating a FortiGate-VM instance between license types
    • Obtaining FortiCare-generated license and certificates for GCP PAYG instances
• Deploying FortiGate-VM on Google Cloud Marketplace
  • Initially deploying the FortiGate-VM
  • Registering and downloading your license
  • Connecting to the FortiGate-VM
• Deploying FortiGate-VM on Google Cloud Compute Engine
  • Obtaining the deployment image
  • Uploading the FortiGate deployment image to Google Cloud
  • Creating the FortiGate deployment image
  • Deploying the FortiGate-VM instance
  • Connecting to the FortiGate-VM
  • Configuring Google Cloud firewall rules
  • Configuring the second NIC on the FortiGate-VM
  • Configuring static routing in FortiGate-VM
    • Configuring static network settings
      • Assigning a static internal IP address in GCP
      • Configuring static addressing in FortiOS
    • Load balancer routes
    • MULTI_IP_SUBNET scheme
• Deploying FortiGate-VM using Google Cloud SDK
  • Using the Google Cloud SDK to deploy FortiGate-VM
  • Bootstrapping FortiGate at initial bootup
• Deploying FortiGate-VM using Terraform
• High availability for FortiGate-VM on GCP
  • Deploying FortiGate-VM HA on GCP in one zone
    • Checking the prerequisites
    • Deploying FortiGate HA using the GCP GUI
      • Obtaining the deployment image
      • Uploading the FortiGate deployment image to GCP
      • Creating the FortiGate deployment image
      • Creating VPC networks
      • Creating VPC firewall rules
      • Deploying the primary FortiGate-VM instance
      • Deploying the secondary FortiGate-VM instance
      • Creating a GCP route table
      • Uploading the license and configuring network interfaces
      • Setting up FortiGate HA
    • Deploying FortiGate HA using the Google Cloud command interface
  • Deploying FortiGate-VM HA on GCP between multiple zones
• SDN connector integration with GCP
  • Configuring GCP SDN Connector using service account
  • GCP Kubernetes (GKE) SDN connector
  • Configuring GCP SDN connector using metadata IAM
  • Creating a GCP service account
  • Troubleshooting GCP SDN Connector
  • Pipelined automation using Google Cloud function
• Deploying auto scaling on GCP
  • Requirements
  • Deployment
    • Quotas
    • Terraform variables
    • Deployment information
  • Verify the deployment
  • Adding instances to the protected subnet
  • Destroying the cluster
  • Troubleshooting
  • Appendix
    • FortiGate Autoscale for GCP features
    • Architectural diagram
• VPN for FortiGate-VM on GCP
  • Site-to-site IPsec VPNs between HA VPN on GCP
• Packet mirroring
  • Creating VPC networks
  • Launching the FortiGate-VM instance
  • Creating an unmanaged instance group and load balancer
  • Configuring bidirectional VPC peering
  • Creating the packet mirroring policy
  • Verifying the configuration
• SD-WAN transit routing with Google Network Connectivity Center
  • Prerequisites
  • Script execution for a single spoke
  • Configuring site-to-site VPN
  • Configuring the tunnel interfaces
  • Configuring BGP neighbors
  • Enabling dynamic routing mode
  • Completing post-deployment configuration
  • Deploying multiple spokes
  • Deploying resources in spoke VPC
  • Validating the configuration