[Raw Firewall Throughput: 10 Gbps] │ ├──► [IPS / Application Control Enabled: Drops to ~4-5 Gbps] │ └──► [Full Threat Protection + SSL Inspection: Drops to ~1.5-2 Gbps]
Azure imposes regional vCPU quotas on your subscription. If you plan to deploy multiple large FortiGate-VM instances, verify your quota before deployment. You can request increases from Microsoft if necessary.
The VM01 can support basic needs, but requires 4GB RAM for optimal operation if UTM features are enabled. Scenario B: Medium Enterprise/SD-WAN Hub (High Intensity)
by default, which is essential for low-latency traffic processing. F-Series (Compute Optimized):
| | Bandwidth | License SKU | |---|---|---| | 2 | 1 Gbps | FG-VM02 | | 4 | 2 Gbps | FG-VM04 | | 10 | 5 Gbps | FG-VM08 | | 20 | 10 Gbps | FG-VM16 | | 30 | 15 Gbps | FG-VM16 (3 instances) | | 40 | 20 Gbps | FG-VM16 (4 instances) | | 60 | 30 Gbps | FG-VM16 (5 instances) | fortigate vm sizing azure
are required if your architecture demands multiple segmented subnets or a complex Hub-and-Spoke design. 3. Aligning with FortiGate Licensing
Based on the guidelines above, you would need a:
This guide breaks down how to choose the right VM size to ensure peak performance without overspending.
FortiGate VMs are best suited for specific Azure VM families designed for compute and networking performance. Recommended VM Families [Raw Firewall Throughput: 10 Gbps] │ ├──► [IPS
Check CPU utilization per core: get system performance status
Post-deployment validation prevents production outages. Monitor your FortiGate VM using both Azure Monitor and FortiOS Diagnostic CLI commands.
Azure offers various VM families, but not all are created equal for high-performance security. Dv5 and Dsv5-Series (General Purpose):
When mapping Fortinet’s VM core licensing (VM-02, VM-04, VM-08, etc.) to Azure instances, use the following architectural baselines for production environments: FortiGate License Recommended Azure VM Size Target Use Case Standard_F2sv2 / Standard_D2ds_v4 The VM01 can support basic needs, but requires
Sizing approach (practical steps)
FortiGate-VM BYOL licenses are sold in tiers based on the number of the firewall can actively use to process traffic. Available tiers include FG-VM01 (1 licensed vCPU), FG-VM02 (2 licensed vCPUs), FG-VM04 (4), FG-VM08 (8), FG-VM16 (16), FG-VM32 (32), and FG-VMUL (Unlimited).
Cost-efficient high performance for specific modern workloads. Requires specific ARM64 FortiOS images. 3. Licensing vs. Azure Sizing