Overview

FortiNDR-VM for AWS can be deployed as a virtual appliance in AWS (IaaS). This section shows you how to install and configure a single instance FortiNDR-VM in AWS to provide a threat monitoring/response security solution to protect your workloads in the AWS IaaS.

Instance support

Instance type	vCPU
R5.4xlarge	16
R5.8xlarge	32

Region support

The following regions are supported on BYOL deployments. See Order types.

Instance support may vary depending on the regions.

Region name	Region code
US East (N. Virginia)	us-east-1
US East (Ohio)	us-east-2
US West (N. California)	us-west-1
US West (Oregon)	us-west-2
Asia Pacific (Seoul)	ap-northeast-2
Asia Pacific (Singapore)	ap-southeast-1
Asia Pacific (Sydney)	ap-southeast-2
Asia Pacific (Tokyo)	ap-northeast-1
Canada (Central)	ca-central-1
EU (Frankfurt)	eu-central-1
EU (Ireland)	eu-west-1
EU (London)	eu-west-2
EU (Paris)	eu-west-3
AWS GovCloud (US-West)	us-gov-west-1

Opening ports in the security group:

Port1(Admin)	Protocol/Ports	Purpose
Incoming	TCP 22	SSH
	TCP 443	HTTPS
	TCP 514	OFTP
	TCP 1344/11344	ICAP
Outgoing	Any
Port2(Sniffer)	Protocol/Ports	Purpose
Incoming	Any	Traffic Mirroring to Sniffer
Outgoing	Any