FortiGate CNF Deployment Scenarios

[aallisonftnt]

Traffic must be correctly routed through a FortiGate CNF instance in order to be inspected. The routing depends on your cloud workload architecture, with a virtually unlimited number of possibilities.

This resource presents some typical deployment scenarios in AWS, with instructions on routing traffic to the FortiGate CNF instance. Follow the scenario that matches your architecture, or use the principles presented as a basis for a customized approach.

View the deployment scenarios appendix in the FortiGate CNF Administration Guide to learn more. 

You can also jump to the following scenario examples:

• AWS examples:

  • Distributed egress: north-south traffic Example

  • Distributed inter-subnet east-west traffic in one AZ Example

  • Distributed inter-subnet east-west traffic between AZ Example

  • Distributed inter-VPC east-west traffic Example

  • Centralized ingress: inspection before load balancer Example

  • Centralized ingress: inspection after load balancer Example

  • Centralized egress Example

  • Centralized east-west, inter-VPC Example

• Azure examples:

  • Azure ingress and egress using public IP Example

  • Azure ingress and egress using Load Balancer with public IP Example