Skip to main content
IPL-Travis
IPL-Travis
New Member
October 8, 2024
Question

Deploying FortiGate NVAs on Azure vWAN - Internet Inbound

  • October 8, 2024
  • 7 replies
  • 2765 views

Hi Y'all,

 

I'm attempting to deploy FortiGate NVAs on an Azure vWAN and I am stuck on the 'Configuring Internet Inbound/DNAT Policies' step:  Configuring internet inbound/DNAT policies | FortiGate Public Cloud 7.4.0 | Fortinet Document Library

 

The NVAs are running 7.4.4, its talking to Manager/Analyzer just fine, BGP routes to Azure vNets are populating fine as far as I can tell.  It is probably as simple as me just not understanding the instructions but I'm not following the instructions about Internet Inbound settings all that well.

 

Which IP addresses should I use for the source-address-prefix setting?  Are the IPs in the example just for show?  I can't find them referenced anywhere else in the deployment procedures.

 

The command execute azure vwan-slb show returns failed to retrieve vwan slb settings.  Am I correct in assuming that this result occurs because I have not configured azure vwan via the CLI yet?

 

Is there any other documentation that anybody knows of regarding this process?

 

Any nudge in the right direction would be greatly appreciated, thank you so very much.

 

7 replies

Anthony_E
Staff
Anthony_E
Staff
October 11, 2024

Hello Travis,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
    Anthony_E
    Staff
    Anthony_E
    Staff
    October 14, 2024

    Hello both of you,

     

    We are still looking for someone to help you.

    We will come back to you ASAP.


    Regards,

    Best Regards
    IPL-Travis
    IPL-TravisAuthor
    New Member
    October 14, 2024

    Thank you for looking into this for us Anthony.

      Anthony_E
      Staff
      Anthony_E
      Staff
      October 15, 2024

      Hello @Debbie_FTNT,

       

      Could you please have a look at this request?

       

      Regards,

      Best Regards
        Anthony_E
        Staff
        Anthony_E
        Staff
        October 21, 2024

        Hello @AEK,

         

        Do you mind to have a look?

         

        many thanks for considering my request.

        Best Regards
        AEK
        SuperUser
        AEK
        SuperUser
        October 21, 2024

        Hi Anthony

        Unfortunately it is not my field :(

        Hope someone else can help.

        AEK
          Anthony_E
          Staff
          Anthony_E
          Staff
          October 21, 2024

          Thank you Abdelkrim :)!

          Best Regards
          Anthony_E
          Staff
          Anthony_E
          Staff
          October 22, 2024

          Hello,

           

          Could I invite you to contact our support:

          https://support.fortinet.com/welcome/

           

          They will for sure, provide you with the help requested.

           

          Regards

          Best Regards
            AkshayKaroo
            AkshayKaroo
            New Member
            March 27, 2025

            Hi @Anthony_E ,

             

            Currently we are doing the POC for the same deployment in azure vwan. I have deployed the firewall successfully. But, Firewall is not able to retrieve the  Azure vwan SLB settings.

            I have tried deploying in multiple regions but facing the same issue. Can someone let me know if this is a know issue or there are some settings on azure which need to be fixed?

            Following the below article for deployment.
            https://docs.fortinet.com/document/fortigate-public-cloud/7.4.0/azure-vwan-sd-wan-ngfw-deployment-guide/970796/configuring-internet-inbound-dnat-policies-without-fortimanager

            Terms & ConditionsAccessibility statement