Which products are currently supported in Azure? FortiGate (version 5.2,
BYOL) FortiWeb (version 5.7, BYOL) FortiMail (version 5.3, BYOL)
FortiAnalyzer (version 5.4, BYOL) FortiManager (version 5.4, BYOL) Will
there be an on-demand/pay as you go opti...
Public cloud networks (including Azure) do not allow virtual appliances
to modify layer 2/3 MAC/IP tables. These are defined in software by the
cloud environment. Thus traditional HA and first hop redundancy, which
rely heavily on gratuitous ARP, wil...
Within Azure, there appear to be redundant options for various products.
This is due to the fact that Azure has published the image as well as
solution templates. In most cases, it is much more difficult, if not
impossible to create a working solutio...
Caveat from product development: There is no accurate way to test
performance in Cloud environments. There are no tools for such an
undertaking, as such our BMRK team doesn't provide any official
performance numbers for Azure. The closest you will fi...
See the attached pdf for screenshots. Step 1: Log in to Azure Preview
Portal (https://portal.azure.com) Step 2: Click “New” Step 3: Select
“MarketPlace” Step 4: Search for FortiGate Step 5: Click Create Step 6:
Fill in Basics Step 7: Configure Networ...
Hi Blair,If you are referencing a local image, then you will need to
verify the path is set correctly. The assumption being made is that
there’s an “images” blob in the specified storage account which hosts
the image chosen in the parameters definiti...
You can only use a single public load balancer with the FortiGates.
However, you can add multiple frontends to that load balancer. Each
Frontend will have a unique public IP. And, then, yes you would use
D-NAT (in our configuration it’s called Virtua...
Hi Blair,Unfortunately, no. Azure doesn’t allow any hosted VM to
participate in BGP, or any dynamic routing with the local vswitch. So,
there’s nothing we can do to alleviate this problem.Regards,MartinFrom:
"Blair Getz via Cloud Security:" Reply-To:...
Azure has a new load balancer in preview which functions much more like
a traditional FHRP VIP. The big difference is that it can forward all
protocols, rather than having to be configured on a per TCP/UDP port
basis. Here's their documentation on it...
Hi Blair,This feature is primarily for replicating applications out of
physical data centers. As such, I imagine FortiGate HA could be a part
of the custom recovery plan. However, even if you replicated FortiGate
virtual appliances from a physical da...