Skip to main content
Visitor
June 19, 2026
Question

Azure vWAN and fortigate managed app NVA deployment using terraform, is it worth it?

  • June 19, 2026
  • 3 replies
  • 38 views

Hey guys,

I'm failrly new to terraform and I was curious if fortigate managed app deployment within Azure vWAN is a good option/approach? Keeping in mind that rest of the infrastructure (vWAN, HUB/s, VNETs, NSGs, subnets..etc) is deployed using terraform, would there be any harm if NVAs are deployed manually?

ps NVA deployment would be one time setup, no multiple environments (dev, prod, test) nor requirements for NVAs to be deployed more often

Every comment is appreciated
 

    3 replies

    Jean-Philippe_P
    Staff & Editor
    Staff & Editor
    June 23, 2026

    Hello kirito34, 

     

    Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

     

    Regards,

    Jean-Philippe - Fortinet Community Team
    Jean-Philippe_P
    Staff & Editor
    Staff & Editor
    June 24, 2026

    Hello,

     

    We are still looking for an answer to your question.

     

    We will come back to you ASAP.

     

    Regards,

    Jean-Philippe - Fortinet Community Team
    Jean-Philippe_P
    Staff & Editor
    Staff & Editor
    June 25, 2026

    Hello again kirito34,

     

    I found this answer, can you tell if it helps you, please?

     

    Azure vWAN and FortiGate Managed App NVA Deployment Using Terraform

    Deploying FortiGate NVAs (Network Virtual Appliances) within an Azure vWAN using Terraform can be a strategic choice, especially if your infrastructure is already being managed with Terraform. Here are some considerations:

     

    Benefits of Using Terraform

    1. Consistency and Repeatability: Terraform allows you to define your infrastructure as code, ensuring that deployments are consistent and repeatable. This can be particularly beneficial if you plan to scale or replicate your setup in the future.

    2. Version Control: Infrastructure as code can be version-controlled, allowing you to track changes over time and roll back if necessary.

    3. Automation: Automating the deployment process reduces the risk of human error and can save time, especially if you need to make updates or changes to your infrastructure.

    4. Integration: If the rest of your infrastructure is managed with Terraform, integrating FortiGate NVA deployment into the same workflow can simplify management and reduce complexity.

     

    Considerations for Manual Deployment

    1. One-Time Setup: If the NVA deployment is truly a one-time setup with no plans for scaling or frequent updates, manual deployment might be sufficient. However, this approach lacks the benefits of automation and version control.

    2. Complexity: Manual deployment can be more error-prone, especially if the setup is complex or if there are many dependencies.

    3. Future Changes: Consider the possibility of future changes or scaling needs. If there's any chance that you might need to modify the setup, using Terraform from the start could save time and effort.

     

    Conclusion

    If your infrastructure is already managed with Terraform and you anticipate any future changes or scaling, it would be beneficial to include FortiGate NVA deployment in your Terraform scripts. This approach provides consistency, automation, and ease of management. However, if the deployment is truly a one-time setup with no anticipated changes, manual deployment could suffice, though it may lack the benefits of automation and version control.

     

    Follow-Ups and Clarification Questions

    1. Future Plans: Do you anticipate any future changes or scaling needs for your NVAs?
    2. Complexity: How complex is your current infrastructure setup, and how comfortable are you with managing it manually?
    3. Terraform Experience: How comfortable are you with using Terraform, and do you have the resources to manage the deployment through it?
    Jean-Philippe - Fortinet Community Team