An alternative HA design uses the FortiGate SDN connector, which makes API calls directly to Azure to shift public IP addresses and update User Defined Routes (UDRs) upon failover. This approach provides tighter integration with Azure's networking fabric. However, failover times can be longer due to the time required for Azure to complete IP reassignment and route updates.
Modern FortiGate images support both AMD (EPYC) and Intel (Xeon) architectures, as well as ARM64-based Ampere Altra processors. ARM64 instances often deliver superior price-to-performance ratios for specific firewalling workloads. 2. Accelerated Networking (SR-IOV)
Moderate CPU impact. Packets are reassembled to match signatures. fortigate vm sizing azure
Once upon a time, in the rapidly expanding kingdom of Azure, a network architect named was tasked with deploying a FortiGate VM
Local NVMe temp disk improves logging, IPS, and WAD cache. Use ds series if you don’t need local disk. An alternative HA design uses the FortiGate SDN
: Useful if you are running memory-intensive features like heavy logging or large-scale SSL-VPN termination . Critical Configuration Tips Instance type support | FortiGate Public Cloud 7.6.0
BYOL licenses are hard-coded to a maximum number of vCPUs (e.g., FG-VM02 supports up to 2 vCPUs, FG-VM08 supports up to 8 vCPUs). Modern FortiGate images support both AMD (EPYC) and
If you assign an 8‑vCPU Azure VM but purchase only a VM04 license, the FortiGate will only use 4 vCPUs. Right-size both the Azure VM and the license.
General purpose, medium traffic edge, and internal segmentation. Balanced compute and memory ratio. Intel Xeon High-throughput edge firewalls, SD-WAN hubs. Improved network bandwidth over v4. Edv5 / Edsv5 Intel Xeon Large scale VPN gateways, high session counts. High memory-to-vCPU ratio for large routing tables. Fsv2 Intel Xeon
If your network design mandates segmented DMZs or multiple internal routing zones using separate virtual NICs, you cannot select a Standard_F2sv2 (capped at 2 NICs), even if its CPU and throughput capacities are sufficient for your traffic volume. High Availability (HA) Cluster Impacts