How to configure FortiGate VM for Network Security on Kamatera

FortiGate VM provides protection from a broad array of network threats. It is a virtualized version of Fortinet’s FortiGate firewall, that is designed to provide the same robust security features as the hardware-based version in a virtual environment. 

It provides robust network security solutions by integrating protective functions into a single machine. Its high performance is ensured by accommodating networks of various sizes and scalability. FortiGate’s user-friendly interface and automation capabilities help organizations maintain robust security while meeting compliance requirements.

Here is a step-by-step guide to configuring FortiGate VM on Kamatera for maximum network security.

First, create an account on Kamatera.

Go to console.kamatera.com and sign up for an account by providing the following information:

1. Verify Your Email: Click the verification link sent to your email by Kamatera.
2. Password: Enter your password.
3. Repeat Password: Re-enter your password and click Create Account.

 
Then, access the Kamatera management console.

Enter your username and password and click Login to access Kamatera Management Console.

1. Navigate to My Cloud on left hand side, select Servers and click on Create New Server.

Choose a zone.

Choose the zone that you need.

• Asia
• North America
• Europe 
• Middle East

Note: For this setup, we used the Asia server domain to set up the Windows Server.

2. Choose an image.

Kamatera offers a variety of App and Server Images to help users set up preconfigured resources. You can explore options such as:

• Server OS Images
• Desktop OS Images
• App Images
• Service Images 
• My Private Images

In this, select Service Images and select FortiGate VM and choose the latest version of FortiGate VM.

Note: Here the latest version of FortiGate is 7.0.1.

You can see the details of FortiGate URL, username, and password.

3. Toggle the Detailed view button to enable you to view the detailed description, including the price.

Choose server specs.

4. Toggle Daily Backup and Management Services buttons enabled or disabled, according to your requirements.

5. Choose networking

You can select the network that works for you, whether it’s a public Internet network or a private local network.

Simple Mode

6. Advanced Configuration 

 Hide – If the user wants to hide the advanced configuration. 

 Show – If you want to see the advanced configuration.

7. Finalize Settings

Finalize settings by setting the password, re-validating it, selecting the number of servers, specifying the server name, and enabling the Power On Servers option.

Note: Once the user enters the details in Finalize Settings, they can select either the Monthly Billing Cycle or Hourly Billing, depending on their requirements.

8. Billing Cycle and Pricing

The user can choose between the Monthly Billing Cycle and Hourly Billing Cycle.

Note: The Server Summary displays the location, operating system (including server specifications), add-on services, servers, and pricing.

Click Create Server.

9. In Tasks Queue, you can see the FortiGate VM server is downloading.

10. Now, you can see the installation is complete.

11. FortiGate VM server is reflected in the Server Management dashboard. Click on Open, beside the FortiGate VM server.

12. Overview tab in the center displays information like Power state, Guest OS, Zone, WAN, LAN and Server ID of the server 

Click on Connect to connect to the server.

13. Click on Open Remote Console.

14. A Command Line Interface opens. Enter your login credentials.

You may encounter problems such as your license has expired, then you need to add the new license by clicking on Upload.

After uploading, click OK.

15. Now, go to browser and enter the IP address of the FortiGate server.

http://xxx.xxx.x.xx

Enter your Username and Password and click on Login.

15. In the FortiGate Setup window, Click on Begin or Later.

Note: Here, we clicked on Begin.

16. Select Optimal or Comprehensive according to your requirements. Click on OK.

Note: Optimal is selected. 

17. Toggle Don’t show again to enable, so that it is not seen every time you login.

Click on OK.

18. Now, you can explore the features of the FortiGate VM dashboard.

19. Bell icon shows the notifications, such as VM evaluation license. If it is expired, then you must redo the process.

20. In the left pane, under Network, select Interfaces.

Network refers to the configuration settings related to how FortiGate VMs will interact and manage network traffic.

Now, in the middle pane, you can see the internal LAN: port 1 and port 2

HTTP is in red, because they are not secure and not recommended.

• Double-click on the IP addresses.

• In the Edit Interface, you can make changes according to your requirements and click on OK.

21. Click on Command prompt (CLI) button in the top right corner to check whether this FortiGate VM can access the Internet.

In the CLI Console, run the below command.

Command: exe ping 8.8.8.8

If you see the message shown in the screen below, then your VM is accessing the Internet.

22. Under Policy & Objects, select Firewall policy. 

Policies are rules that manage, and control networks based on certain predefined criteria. 

• In the middle pane, click on Create New to create a new policy.

• Make the required changes in New Policy, Firewall/Network Options, Security Profiles, Logging Options, Comments.

Note: Select All Sessions in Logging Options.

             Toggle Enable the policy on to enable the policy.

Click on Ok.

23. Congratulations! You have successfully downloaded FortiGate and configured it for maximum network security. You can continue to use FortiGate for your lab activity and explore more features.