Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mbrowndcm
New Contributor III

Is there a Fortigate emulator for testing?

Hello, I know of the FortiVM virtual machine (similar to Checkpoint' s SPlat, or homegrown firewall solutions). This is, unfortunately, a true licensable, production device of course. I am wondering if Fortinet has released a FortiOS emulator. Something similar to NetApp' s Data ONTAP Simulator would be great. Does anyone know if this is something that Fortinet does or is slated to release? Thanks, Matt
" …you would also be running into the trap of looking for the answer to a question rather than a solution to a problem." - [link=http://blogs.msdn.com/b/oldnewthing/archive/2013/02/13/10393162.aspx]Raymond Chen[/link]
" …you would also be running into the trap of looking for the answer to a question rather than a solution to a problem." - [link=http://blogs.msdn.com/b/oldnewthing/archive/2013/02/13/10393162.aspx]Raymond Chen[/link]
9 REPLIES 9
ede_pfau
Esteemed Contributor III

AFAIK all VMs come with a 15-day trial period for free. Which can be prolonged if you are in direct contact to a Fortinet partner.

Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
mbrowndcm
New Contributor III

Thanks ede. I' ve reach out to my region' s sales rep, Grant Landers, about this. I' ll post back with what he says.
" …you would also be running into the trap of looking for the answer to a question rather than a solution to a problem." - [link=http://blogs.msdn.com/b/oldnewthing/archive/2013/02/13/10393162.aspx]Raymond Chen[/link]
" …you would also be running into the trap of looking for the answer to a question rather than a solution to a problem." - [link=http://blogs.msdn.com/b/oldnewthing/archive/2013/02/13/10393162.aspx]Raymond Chen[/link]
emnoc
Esteemed Contributor III

You might want to contact Bonnie over in fortinet training, I remember hearing something about this from a training-session objective. Not sure if it was going to come true or be offered in the public sector or if fortinet even proceeded down that path. fwiw, older fortigates are cheap to buy for a lab/training purpose. You can pretty much do alot on these older gear, minus the hardware features that you see within the newer appliances.

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
mbrowndcm
New Contributor III

I actually have two 100As collecting dust that I can use, and it seems they aren' y quite EOF yet. But beyond this, having a simulator/emulator would be great... even through a web interface... And... Fortigate 300B is up and accessible at fortigate.com with user: demo pass: fortigate But you can' t generate packets to send through the device. That user is also quite restricted.
" …you would also be running into the trap of looking for the answer to a question rather than a solution to a problem." - [link=http://blogs.msdn.com/b/oldnewthing/archive/2013/02/13/10393162.aspx]Raymond Chen[/link]
" …you would also be running into the trap of looking for the answer to a question rather than a solution to a problem." - [link=http://blogs.msdn.com/b/oldnewthing/archive/2013/02/13/10393162.aspx]Raymond Chen[/link]
rwpatterson
Valued Contributor III

The 100As should do quite fine for a lab. I' m jealous.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
p768

we have a pair of 3810As for testing...
mbrowndcm
New Contributor III

Only two? You must at least have them heartbeating through a Cisco Nexus 7000 series redundant pair right?
" …you would also be running into the trap of looking for the answer to a question rather than a solution to a problem." - [link=http://blogs.msdn.com/b/oldnewthing/archive/2013/02/13/10393162.aspx]Raymond Chen[/link]
" …you would also be running into the trap of looking for the answer to a question rather than a solution to a problem." - [link=http://blogs.msdn.com/b/oldnewthing/archive/2013/02/13/10393162.aspx]Raymond Chen[/link]
p768
New Contributor

sorry to disappoint, our test firewalls are only connected to 6 Cisco 6500s
mbrowndcm
New Contributor III

At least can you confirm that these 6500s are interconnected using dedicated layer 2 lines inter-continentally?
" …you would also be running into the trap of looking for the answer to a question rather than a solution to a problem." - [link=http://blogs.msdn.com/b/oldnewthing/archive/2013/02/13/10393162.aspx]Raymond Chen[/link]
" …you would also be running into the trap of looking for the answer to a question rather than a solution to a problem." - [link=http://blogs.msdn.com/b/oldnewthing/archive/2013/02/13/10393162.aspx]Raymond Chen[/link]
Labels
Top Kudoed Authors