Deploying FortiTester-VM instances

The following topics introduces how to deploy FortiTester-VM on OCI.

Obtaining the Deployment Image

1. Go to the Fortinet support site (https://support.fortinet.com) and log in.
2. Navigate to Download > Firmware Images.
   
3. Under Select Product, select FortiTester, then select the firmware version directory.
   
4. Download the image file FTS_VM_OCI_BYOL-vxxx-buildxxxx-FORTINET.out.oci.zip, where vxxxx is the major version number, and buildxxxx is the build number.

Creating the VCN and public subnets

To deploy the FortiTester-VM instance in a new virtual cloud network, follow steps below:

1. On the OCI Console, click Create a virtual cloud network.
2. For the NAME field, enter a VCN name, for example, fts_mgmt_vcn.
3. Select CREATE VIRTUAL CLOUD NETWORK PLUS RELATED RESOURCES. This allows you to create the Internet gateway, routing table, and subnet all together using Oracle default settings. You can also select CREATE VIRTUAL CLOUD NETWORK ONLY to create each resource separately accordingly. Here, we take CREATE VIRTUAL CLOUD NETWORK PLUS RELATED RESOURCES as an example.
4. Click Create Virtual Cloud Network.
   
5. Click Close from the pop-up window.
6. Click Create Subnet from the Virtual Cloud Network Details page for the management subnet.
   
   • For the NAME field, enter a subnet name, for example, fts_mgmt; for SUBNET ACCESS, select PUBLIC SUBNET. For other options, follow the default ones.
   • For SECURITY LIST, you can select Default Security List for fts_mgmt.
     
     1. Edit the default security list
        Go to Resources > Security Lists, click Default Security List for fts_mgmt. Click Add Ingress Rules to add a rule to allow TCP port 443.
     2. Create a new security list
        Go to Resources > Security Lists > Create Security List.
7. Click Create Subnet.
8. Click Create Subnet from the Virtual Cloud Network Details page for the traffic subnet.
   
   • For the NAME field, enter a subnet name, for example, fts_traffic; for SUBNET ACCESS, select PRIVATE SUBNET. For other options, follow the default ones.
   • For SECURITY LIST, you can select Default Security List for fts_traffic.
     
     1. Edit the default security list
        Go to Resources > Security Lists, click Default Security List for traffic. Click Add Ingress Rules to add a rule to allow all traffic.
     2. Create a new security list
        Go to Resources > Security Lists > Create Security List.
9. Click Create Subnet.

Creating a FortiTester-VM instance

To create a FortiTester-VM instance by importing an image file, follow steps below:

1. Obtain the deployment image file image.out.oci.zip, and unzip the file (ftsos.oci).
2. On the OCI Console, create a storage bucket.
   
   • Click Store data.
   • Configure the bucket as below.
     
   • Click the created bucket, and update the deployment image file ftsos.oci by clicking Upload Objects.
   • Once the file is uploaded, click Pre-Authenticated Requests.
     For NAME, you can use the default one or specify a name.
     For PRE-AUTHENTICATED REQUEST TARGET, select OBJECT.
     For OBJECT NAME, enter the object name you have created.
     For ACCESS TYPE, use the default type.
     Click Create Pre-Authenticated Request.
     
   • Note down the URL below.
     
3. Import the image.
   
   • Go to Compute > Custom Images. Click Import Image.
   • For the OBJECT STORAGE URL field, enter the URL link you have noted in last step; for IMAGE TYPE, select OCI.
   • Click Import Image.
   • Wait until the IMPORTING... status changes to AVAILABLE.
4. Create the FortiTester-VM instance.
   • For the newly imported image, click Create Instance.
   • Enter a name to identify the instance;
     for Availability Domain, select the desired domain;
     for Instance Type, select Virtual Machine;
     for Instance Shape, select Standard2 instance families such as VM.Standard2.4, VM.Standard2.8, VM.Standard2.16, and VM.Standard2.24.
     for Virtual cloud network, select the VCN to launch the instance.
     for Subnet field, select a subnet on the Internet-facing side of the network.
   • Click Create.
   • Wait until the PROVISIONING… status changes to RUNNING. You can also check the FortiTester’s public IP address in this screen once it becomes available.