Technical Tip: FortiGate Cloud switch region

[naveenk]

Description

This article describes how to switch regions in the FortiGate Cloud portal and how to move FortiGates between FortiGate Cloud regions.

Scope

FortiGate, FortiGate Cloud.

Solution

Go to FortiGate Cloud. On the FortiGate Cloud home page, the list of FortiGates added to the FortiGate Cloud can be viewed under Assets -> Asset list.
On the top right of the portal, select the option 'Region' and choose the desired region from the dropdown. 

Moving a FortiGate to a new FortiGate Cloud Region within the same FortiGate Cloud account:

1. Log out of FortiGate Cloud from the FortiGate GUI under System -> FortiGuard.

This causes FortiGate to show offline/inactive in the previous region.

2. Activate FortiGate Cloud from the FortiGate GUI and select the desired region. The email/password should match the master FortiCloud account.

If the 'Domain' dropdown selection is showing only US, run the commands below to update the FortiGuard server update location:

Technical Tip: Only US domain is visible in FortiGate Cloud activation widget.

config system fortiguard
    set update-server-location automatic
end

If the FortiGate Cloud connection was previously migrated from a different FortiCloud account, it is not possible to activate FortiGate Cloud from the FortiGate GUI. In this case, see the FortiGate Cloud CLI login steps in the article: Technical Tip: Migrate a FortiGate Cloud account to another one.

execute fortiguard-log login <account_email> <account_password> <GLOBAL | US | EUROPE>

The FortiGate will show 'Active' in the new region.

Note:

1. Historical FortiGate logs are not moved between FortiGate Cloud regions.
2. Migration of logs between different regions is not currently supported. The historical logs remain visible in the previous region; any new logs are visible in the new region.
3. If the changing region on the FortiGate cloud is not available and is grayed out, as shown below.  

This would be because the FortiGate is not registered with the account that is used to log in to the FortiGate cloud. Only the master user will be able to switch the regions. If the sub-user wants to switch the region, the user has to log in with the IAM account, not with the regular email account. More information about the IAM account is found here: Adding IAM users 

Related articles:

Technical Tip: FortiGate Cloud Japan region

Technical Tip: How to change FortiGate's server location for FortiGate Cloud
Technical Tip: Unable to see FortiGate on FortiGate-Cloud