Fortinet Document Library

Version:


Table of Contents

FortiSandbox VM on Azure

3.2.0
Download PDF
Copy Link

Creating network interfaces

Create the following network interfaces:

  • The first network interface is for FortiSandbox port1.
  • The second network interface is for FortiSandbox port2.
  • If you want to use HA-Cluster on multiple FortiSandbox Azure units, create a third network interface is for FortiSandbox port3.
To create a network interface in Azure:
  1. In the Azure portal, click Network interfaces in the left pane.
  2. Click Add to create a new network interface.

    Microsoft Azure dashboard showing the creation of a network interface.

  3. Enter the following information:

    Name

    VM name.

    Virtual network

    Select your VNet.

    Subnet

    One subnet under your VNet. Each interface you create must be on a different subnet.

    Private IP address assignment

    Static.

    Private IP address

    Self-defined static IP address.

    Network security group

    Select the security group you created.

    Private IP address (IPv6)

    Unchecked.

    Subscription

    Subscription type.

    Resource group

    The resource group you created in the Creating a resource group step.

    Location

    Select the same location used while setting up the resource group.

  4. Repeat these steps to create the network interfaces you need.
    Note

    If you create multiple network security groups, the one associated with the FSA port1 interface must be under the security group which includes HTTPS (TCP 443), SSH traffic (TCP 22), OFTP traffic (TCP 514), and the one associated with the FSA port2 interface must be under the security group which includes FTP.

  5. Associate the network interface used for the FSA admin port (port1) with the Public IP address in the IP configuration section.

Creating network interfaces

Create the following network interfaces:

  • The first network interface is for FortiSandbox port1.
  • The second network interface is for FortiSandbox port2.
  • If you want to use HA-Cluster on multiple FortiSandbox Azure units, create a third network interface is for FortiSandbox port3.
To create a network interface in Azure:
  1. In the Azure portal, click Network interfaces in the left pane.
  2. Click Add to create a new network interface.

    Microsoft Azure dashboard showing the creation of a network interface.

  3. Enter the following information:

    Name

    VM name.

    Virtual network

    Select your VNet.

    Subnet

    One subnet under your VNet. Each interface you create must be on a different subnet.

    Private IP address assignment

    Static.

    Private IP address

    Self-defined static IP address.

    Network security group

    Select the security group you created.

    Private IP address (IPv6)

    Unchecked.

    Subscription

    Subscription type.

    Resource group

    The resource group you created in the Creating a resource group step.

    Location

    Select the same location used while setting up the resource group.

  4. Repeat these steps to create the network interfaces you need.
    Note

    If you create multiple network security groups, the one associated with the FSA port1 interface must be under the security group which includes HTTPS (TCP 443), SSH traffic (TCP 22), OFTP traffic (TCP 514), and the one associated with the FSA port2 interface must be under the security group which includes FTP.

  5. Associate the network interface used for the FSA admin port (port1) with the Public IP address in the IP configuration section.