Technical Tip: FortiGate Azure resource list
Description
This article provides a list of resources that can be used to configure and troubleshoot FortiGate on Azure.
Scope
FortiGate, Azure.
Solution
General settings:
Title and Links | Description |
Data sheet for FortiGate-VM on Microsoft Azure. | |
Solutions Hub: (Azure) Public/Private Cloud | Official docs website solutions for Microsoft Azure. |
Virtual IP (VIP) on FortiGate HA (High Availability) deployed in Azure using the SDN connector. Using 'vdom-exception'. | |
IP Pool on FortiGate HA (High Availability) deployed in Azure using the SDN connector. Using 'vdom-exception'. | |
Technical Tip: Configure SDN Connector for Active-Passive HA failover in Azure | SDN Connector configuration to ensure correct secondary IP move on a failover event. |
Troubleshooting Tip: Azure Instance type not available in the location or zone. SkuNotAvailable | Check for Availability Zone (AZ) deployment restriction on Azure account. |
Safely resize the FortiGate-VM instance. | |
Technical Tip: Add a bigger log disk to FortiGate VM in Azure | Increase the disk log size of a FortiGate-VM. |
Configure NAT64 to access the internal resources using IPv4 internally, using IPv6 for external access. | |
Use of multiple Service Providers on a single Azure enterprise application for SAML Administrator login. | |
Technical Tip: Assign multiple public IP addresses to FortiGate VM in Azure | How to allocate multiple public IP addresses, to the FortiGate VM deployed in Azure Cloud, and use these Public IP addresses to access hosted services behind FortiGate VM. |
Â
Troubleshooting:
Title and Links | Description |
Troubleshooting Tip: FortiGate Azure showing 'virtual machine agent not ready' in console | Microsoft Azure Linux Agent (waagent)Â VM interaction with the Azure Fabric Controller. |
Workaround if the secondary node cannot validate the FortiFlex license on an HA FortiGate behind load balance. It should no longer be needed on v7.4.4. | |
Technical Tip: Upgrading PAYG FGT_VM64_AZURE causing system to halt | An explanation of how upgrading FortiOS to v7.2.4 or later requires a valid SKU. |
Troubleshooting Tip: Azure VPN error: peer SA proposal not match local policy | Error IPsec 'peer SA proposal not match local policy'. |
New settings required for SSL VPN Azure AD Auto Connect when FortiGate is running v7.4.2 or higher. |
For SAML General Settings or troubleshooting, see Technical Tip: FortiGate SAML authentication resource list.
List of Resource Lists: Technical Tip: FortiGate Resource Lists.
