Technical Tip: FortiGate Azure resource list

JNDias · ‎07-22-2024

This article provides a list of resources that can be used to configure and troubleshoot FortiGate on Azure.

FortiGate, Azure.

Solution

General Settings

Title and Links	Description
FortiGate VM on Microsoft Azure	Data Sheet for FortiGate-VM on Microsoft Azure.
Solutions Hub Azure Public/Private Cloud	Official docs website solutions for Microsoft Azure.
Configuring VIP on FortiGate HA in Azure with SDN Connector: Ensuring Seamless Failover	Virtual IP (VIP) on FortiGate HA (High Availability) deployed in Azure using the SDN connector. Using 'vdom-exception'.
Configuring ippool on FortiGate HA in Azure with SDN Connector: Ensuring Seamless Failover	IP Pool on FortiGate HA (High Availability) deployed in Azure using the SDN connector. Using 'vdom-exception'.
Configure SDN Connector for Active-Passive HA failover in Azure	SDN Connector configuration to ensure correct secondary IP move on a failover event.
Azure Instance type not available in the location or zone. SkuNotAvailable	Check for Availability Zone (AZ) deployment restriction on Azure account.
Resizing an Azure FortiGate VM instance	Safely resize the FortiGate-VM instance.
Add a bigger log disk to FortiGate VM in Azure	Increase the disk log size of a FortiGate-VM.
NAT64 on Azure	Configure NAT64 to access the internal resources using IPv4 internally, using IPv6 for external access.
Using single Azure Enterprise Application for multiple SAML Service Providers (SPs) for Administrato...	Use of multiple Service Providers on a single Azure enterprise application for SAML Administrator login.

Troubleshooting

Title and Links	Description
FortiGate Azure showing 'virtual machine agent not ready' in console	Microsoft Azure Linux Agent (waagent) VM interaction with the Azure Fabric Controller.
Not able to validate FortiFlex license on an HA FortiGate behind load balance - Azure LB and FortiGa...	Workaround if the secondary node cannot validate the FortiFlex license on an HA FortiGate behind load balance. It should no longer be needed on v7.4.4.
Upgrading PAYG FGT_VM64_AZURE causing system to halt	Upgrade FOS to v7.2.4 or later requires a valid SKU.
Azure VPN error: peer SA proposal not match local policy	Error IPsec 'peer SA proposal not match local policy'
Unable to connect to SSL VPN using Azure Auto Connect after FortiOS firmware upgrade to v7.4.2	new settings required for SSL VPN Azure AD Auto Connect when FortiGate is running v7.4.2 or higher.