Fortigate in the Cloud

AWS Gateway Load Balancer (GWLB)

You should absolutely know this flow.

Traffic flow in AWS:

Traffic from protected VPC Routed to GWLBe Sent to FortiGate CNF Security inspection happens Allowed traffic returns to internet gateway

Key concepts:

GWLB = scalable entry point GWLBe = endpoint referenced in route tables Used for HA and scaling

Azure deployment flow

Azure equivalent:

GWLB tied to VNET Traffic forwarded to CNF CNF enforces policy Traffic exits through Azure NAT Gateway