Assign VIP to server in Azure Fortigate

[Hassan-wahab]

Hi,

I'm using a spoke and hub topology in Azure with HA A/P Fortigate. Some of our servers need to use public IPs to communicate with external servers. I checked the documentation but couldn't find the information I need. Is it possible to assign a VIP to a server in Azure Fortigate?

The traffic flow is: Server > Internal LB > NVA Fortigate Firewall > External LB > Internet.

Thanks!

[hbac]

Hi @Hassan-wahab,

If the traffic is going out through the regular outbound internet connection, it should be source NATed to the public IP. Why would you need VIP? 

Regards, 

[Hassan-wahab]

@hbacWe have up to 8 web servers that need to communicate with third parties via their unique public IPs. The client don't want us to do one to one NAT or use Azure NAT gateway. They want the inbound traffic go through our Fortigate.