Fortigate Vm Sizing Azure

FortiGate supports compute-optimized and general-purpose instance types. , such as F-series, Fs-series, and Fsv2-series, have a higher ratio of vCPUs to memory, making them ideal for network appliances. General-purpose families , such as DSv2-series and Dsv3-series, offer a more balanced CPU-to-memory ratio and work well for moderate traffic loads and development environments.

In Azure Marketplace, FortiGate-VM offers based on license. The license determines the licensed throughput (e.g., 1 Gbps, 2 Gbps, 5 Gbps). The VM size must support that throughput. fortigate vm sizing azure

Man-in-the-middle decryption and re-encryption. This is the most resource-intensive task. It can reduce raw firewall throughput by up to 80-90% on virtualized hardware. Accelerated Networking (SR-IOV) In Azure Marketplace, FortiGate-VM offers based on license

Standard_F8sv2 (8 vCPUs, 16 GB RAM) – Medium enterprise hubs. Balanced Choice: Dsv4 / Dsv5-Series (General Purpose) Man-in-the-middle decryption and re-encryption

The following table maps licensed vCPU tiers to their recommended maximum bandwidth, based on Azure VM types that support those tiers:

| Instance Type | vCPU | Max NIC | Recommended BYOL License | | :--- | :--- | :--- | :--- | | Standard_DS1_v2 | 1 | 2 | FG-VM01 or FG-VM01v | | Standard_DS2_v2 | 2 | 2 | FG-VM02 or FG-VM02v | | Standard_D2s_v3 | 2 | 2 | FG-VM02 or FG-VM02v | | Standard_DS3_v2 | 4 | 4 | FG-VM04 or FG-VM04v | | Standard_D8s_v3 | 8 | 4 | FG-VM08 or FG-VM08v | | Standard_DS5_v2 | 16 | 8 | FG-VM16 or FG-VM16v |