FortiWeb
A FortiWeb can be configured to join a Security Fabric through the root or downstream FortiGate.
kmak
Staff
Staff
Article Id 250320
Description This article describes how to add multiple IP addresses to the FortiWeb-VM in AWS Cloud Console.
Scope FortiWeb.
Solution

Prerequisite:

- The VPC subnet where the FortiWeb-VM instance ENI is attached has available IP address space.

- Public IP association is not required if the FortiWeb VM instance is situated behind a Firewall.

 

1) Log in to AWS Cloud Console and navigate to the FortiWeb instance page. Under Actions, select Networking -> Manage IP addresses.

 

kmak_0-1679890649731.jpeg

 

2) In the IP Addresses page, select Assign new IP address. A new box will be appearing with the Auto-assign option.

Insert the desired IP address or leave it as default for auto-assignment by AWS.

 

kmak_1-1679890649737.jpeg

 

3) Confirmation page will be prompted and select Confirm to proceed.

 

kmak_2-1679890649740.jpeg

 

4) The added IP shall be listed in the Networking tab, under Secondary private IPv4 addresses.

 

kmak_3-1679890649745.jpeg

 

5) Next, log into FortiWeb GUI and navigate to the Virtual IP page.

Create a new Virtual IP using the IP address that is added in AWS Cloud Console. Select port1 as the interface to which the NIC1 is attached.

 

kmak_4-1679890649747.jpeg

 

6) Create the Virtual Server using the added VIP.

 

kmak_5-1679890649750.jpeg

 

7) Create a new Server Policy and select the created Virtual Server.

 

kmak_6-1679890649753.jpeg

 

8) If the FortiWeb-VM is situated behind Firewall or ELB, the forwarding rule is required to be configured at the Firewall or ELB endpoint to forward traffic to the new Virtual IP address.

In this case, if FortiWeb secondary IP is associated with a Public IP Address, test browsing to the associated Public IP address.

 

kmak_7-1679890649754.jpeg

 

Related documents:

fortinet.com/document/fortiweb/7.0.6/administration-guide/219671/configuring-virtual-servers-on-your...

https://community.fortinet.com/t5/FortiWeb/Technical-Tip-How-to-add-multiple-IP-addresses-to-FortiWe...

Contributors