Fortinet Document Library

Version:


Table of Contents

About FortiGate for AWS

Deploying FortiGate on AWS

Deploying Auto Scaling on AWS

Single FortiGate-VM Deployment

Use Case: High Availability for FortiGate on AWS

Security Fabric Connector Integration with AWS

More Links

Enabling Enhanced Networking on Linux

Resources

Upgrade Path Tool
6.0.0
Copy Link

Instance type support

FortiGate supports the following instance types on AWS. Supported instances in the AWS marketplace listing may change without notice and vary between bring your own license (BYOL) and pay as you go/on-demand models. See Order types. As of May 2018, C3 and M-series instances no longer appear as recommended instances.

Note

When you run FortiGate-native active-passive HA, each FortiGate instance requires four network interfaces (port 1 to port 4). For details, see FortiGate-native active-passive HA.

For up-to-date information on each instance type, see the following links:

Instance category

Instance type

vCPU

Max NIC (enabled by AWS)

FortiGate minimum order (BYOL) to consume all instance CPU

General purpose

T2.small

1

2

FG-VM01 or FG-VM01v

Compute optimized

C4.large

2

3

FG-VM02 or FG-VM02v

C4.xlarge

4

4

FG-VM04 or FG-VM04v

C4.2xlarge

8

4

FG-VM08 or FG-VM08v

C4.4xlarge

16

8

FG-VM16 or FG-VM16v

C4.8xlarge

36

8

FG-VMUL or FG-VMULv

C5.large (recommended by default)

2

3

FG-VM02 or FG-VM02v

C5.xlarge

4

4

FG-VM04 or FG-VM04v

C5.2xlarge

8

4

FG-VM08 or FG-VM08v

C5.4xlarge

16

8

FG-VM16 or FG-VM16v

C5.9xlarge

36

8

FG-VMUL or FG-VMULv

C5.18xlarge

72

15

You can apply a smaller FortiGate-VM license if you are OK with consuming less CPU than is present on your instance. See Models.

To change your instance type to the recommended C5 instance type, ensure that ENA is enabled. Otherwise the instance does not boot up properly.

In the following example, after changing the instance type to C5, ENA is not enabled. The example shows changing the ENA support attribute to true:

$ aws ec2 describe-instances --instance-ids i-xxxxxxx --query "Reservations[].Instances[].EnaSupport"

[]

$ aws ec2 modify-instance-attribute --instance-id i-xxxxxxx --ena-support

$ aws ec2 describe-instances --instance-ids i-xxxxxxx --query "Reservations[].Instances[].EnaSupport"

[

true

]

The instance can now boot up as a C5 instance type.

More Links

Resources

Instance type support

FortiGate supports the following instance types on AWS. Supported instances in the AWS marketplace listing may change without notice and vary between bring your own license (BYOL) and pay as you go/on-demand models. See Order types. As of May 2018, C3 and M-series instances no longer appear as recommended instances.

Note

When you run FortiGate-native active-passive HA, each FortiGate instance requires four network interfaces (port 1 to port 4). For details, see FortiGate-native active-passive HA.

For up-to-date information on each instance type, see the following links:

Instance category

Instance type

vCPU

Max NIC (enabled by AWS)

FortiGate minimum order (BYOL) to consume all instance CPU

General purpose

T2.small

1

2

FG-VM01 or FG-VM01v

Compute optimized

C4.large

2

3

FG-VM02 or FG-VM02v

C4.xlarge

4

4

FG-VM04 or FG-VM04v

C4.2xlarge

8

4

FG-VM08 or FG-VM08v

C4.4xlarge

16

8

FG-VM16 or FG-VM16v

C4.8xlarge

36

8

FG-VMUL or FG-VMULv

C5.large (recommended by default)

2

3

FG-VM02 or FG-VM02v

C5.xlarge

4

4

FG-VM04 or FG-VM04v

C5.2xlarge

8

4

FG-VM08 or FG-VM08v

C5.4xlarge

16

8

FG-VM16 or FG-VM16v

C5.9xlarge

36

8

FG-VMUL or FG-VMULv

C5.18xlarge

72

15

You can apply a smaller FortiGate-VM license if you are OK with consuming less CPU than is present on your instance. See Models.

To change your instance type to the recommended C5 instance type, ensure that ENA is enabled. Otherwise the instance does not boot up properly.

In the following example, after changing the instance type to C5, ENA is not enabled. The example shows changing the ENA support attribute to true:

$ aws ec2 describe-instances --instance-ids i-xxxxxxx --query "Reservations[].Instances[].EnaSupport"

[]

$ aws ec2 modify-instance-attribute --instance-id i-xxxxxxx --ena-support

$ aws ec2 describe-instances --instance-ids i-xxxxxxx --query "Reservations[].Instances[].EnaSupport"

[

true

]

The instance can now boot up as a C5 instance type.