FortiGate-VM – Ultra Detailed
Installation Guide with Explanations
1. Step 1: Open a web browser and go to [Link]
→ Access the Fortinet support portal to obtain official VM images and licenses.
2. Step 2: Log in with your Fortinet Support credentials (email and password).
→ You need an active Fortinet account to access downloads and licenses.
3. Step 3: From the top menu, click on 'Download'.
→ The 'Download' section provides access to VM images, firmware, and tools.
4. Step 4: In the dropdown, click on 'VM Images'.
→ Selecting 'VM Images' filters downloads to virtual appliances only.
5. Step 5: Scroll down and click on 'FortiGate'.
→ You must specifically choose the FortiGate product line from all Fortinet VM options.
6. Step 6: Select your VM platform (e.g., VMware ESXi, KVM, Hyper-V).
→ Each VM platform (ESXi, KVM, etc.) has its own compatible image format.
7. Step 7: Click the version you want to download (preferably the latest stable).
→ Choosing the latest version ensures you're deploying a secure and supported build.
8. Step 8: Download the image files. For VMware, download .ovf, .mf, and .vmdk files.
→ VMware uses OVF format; download all related files for a complete package.
9. Step 9: Launch your hypervisor platform (e.g., VMware vSphere Client).
→ Use vSphere or another hypervisor management tool to deploy the image.
10. Step 10: Click on 'Deploy OVF Template' in VMware.
→ Deploying OVF is the recommended way to import FortiGate into VMware.
11. Step 11: Browse and upload the .ovf file you downloaded.
→ You will need to browse your PC for the downloaded .ovf file.
12. Step 12: Assign a name to the VM (e.g., FortiGate-VM-Test).
→ The name helps identify the VM instance within the virtual environment.
13. Step 13: Select the appropriate storage/datastore where the VM will reside.
→ You need to select a datastore with enough space to hold the VM and its logs.
14. Step 14: Assign required compute resources (CPU: 2+, RAM: 4GB+).
→ Minimum CPU/RAM requirements must be met to avoid system instability.
15. Step 15: Attach VM Network Interfaces to correct VLAN or port group (e.g., VM
Network).
→ Ensure the VM is connected to the right network for management or WAN access.
16. Step 16: Review the settings and click 'Finish' to start deployment.
→ Reviewing helps catch misconfigurations before committing the deployment.
17. Step 17: Once deployed, power on the VM.
→ The VM will now be created and files copied to the hypervisor storage.
18. Step 18: Open the VM console window to access CLI.
→ This boots up the FortiGate OS and prepares the system for configuration.
19. Step 19: Wait for the login prompt to appear.
→ You must open the VM console to interact with CLI for initial setup.
20. Step 20: Log in with the default username: admin (no password, just press Enter).
→ The login prompt indicates the system has booted successfully.
21. Step 21: Enter the following CLI command to configure the management interface:
→ This is the default login method on fresh FortiGate deployments.
22. config system interface
→ These commands configure the primary management interface IP and access.
23. edit port1
→ Saving config to flash ensures it persists through a reboot.
24. set ip [Link] [Link]
→ The browser is used to complete the GUI-based setup and license activation.
25. set allowaccess ping https ssh http fgfm
→ Security warning is shown because FortiGate uses self-signed certificate by default.
26. end
→ You use the same admin credentials to access the GUI.
27. Step 22: Save configuration with command: execute backup config flash
→ FortiGate requires a license file to activate full functionality.
28. Step 23: From your PC, open a browser and go to [Link]
→ This step selects the .lic file saved from the support portal.
29. Step 24: Accept security warning and proceed.
→ Clicking OK applies and activates the license in FortiOS.
30. Step 25: Log in to the GUI using admin / (blank password).
→ Rebooting validates the license and applies entitlement settings.
31. Step 26: You will be prompted to upload the license file (.lic).
→ You must wait for the reboot to complete before further configuration.
32. Step 27: Click 'Upload' and select your license file from your local PC.
→ Post-reboot, resume configuration by logging back into the web interface.
33. Step 28: Click 'OK' to confirm and apply the license.
→ The system forces password change to ensure admin account is secure.
34. Step 29: The system will validate the license and may reboot.
→ Verifying interface config ensures management access remains stable.
35. Step 30: Wait for the VM to reboot (observe via console).
→ Naming the firewall helps with identification in logs and NOC dashboards.
36. Step 31: Once up, log in again via GUI: [Link]
→ Time sync is critical for logs, SSL certs, and scheduled policies.
37. Step 32: Change the default admin password as prompted.
→ Setting public DNS helps the device resolve updates and FQDNs.
38. Step 33: Go to Network > Interfaces > port1 and confirm IP and access settings.
→ This confirms license is active and includes support and update entitlement.
39. Step 34: Set system hostname under System > Settings > Hostname (e.g., FGT-VM-Test).
→ Now you begin the security configuration such as firewall policies.
40. Step 35: Set system time and NTP server under System > Settings > Time.
→ Testing internet access ensures the system is operational and online.
41. Step 36: Navigate to Network > DNS and configure primary and secondary DNS servers.
→ FortiGuard checks ensure the firewall can get threat updates.
42. Step 37: Optional: Go to System > Dashboard > License to verify entitlement status.
→ Deployment is complete; you can now apply full network security configuration.
