This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.
Hello - I am new here and looking some expert advice. i tried contacting fortinet technical support on this but nobody seems to know this.
I have deployed one fortinet virtual appliance in azure that has 2 interfaces, i want to use the public interface as the DMZ, i have successfully connected both interfaces to local subnets over VPN and its working no issues what so ever. the problem started when i tried to to do a static NAT to one of the servers in the public subnet/intrerface in azure VA.
my questions
1. can we use the public interface in azure VA as the DMZ and do static NAT, ie: add the public IP to the virtual ip list in fortigate and do a port forwarding? subsequently create a IP-V4 policy to allow access?
2. can we add sub interfaces in azure based fortigate and connect them to azure subsets?
Thank you
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.