The following topics provide an overview of different VPN configurations when using FortiGate-VM for Azure:

  • Connecting a local FortiGate to an Azure VNet VPN

    • This example provides sample configuration of a site-to-site VPN connection from a local FortiGate to an Azure VNet VPN via IPsec VPN with static or border gateway protocol (BGP) routing.

  • Connecting a local FortiGate to an Azure FortiGate via site-to-site VPN

    • This guide provides a sample configuration of a site-to-site VPN connection from a local FortiGate to an Azure FortiGate via site-to-site IPsec VPN with static routing.

  • vWAN

    • Azure virtual WAN (vWAN) is an Azure-managed service that provides automated branch connectivity to and through Azure. You can leverage the Azure backbone to connect branches and enjoy branch-to-virtual network connectivity. Azure regions serve as hubs that you can use to connect your branches to.

      This guide explains how to configure FortiOS to connect to Azure vWAN. It also explains how to access virtual networks in Azure and employ branch-to-branch connectivity.

  • Configuring integration with Azure AD domain services for VPN
    • This step-by-step guide details how to configure an integration with Azure AD domain services. 

  • Configuring FortiClient VPN with multifactor authentication

    • This guide outlines how to integrate Azure multifactor authentication (MFA) to existing on-premise and cloud-based user authentication and VPN infrastructure.