Your choice of licensing impacts how you can size and scale your environment: FortiGate VM on Microsoft Azure Data Sheet - Fortinet
Edge deployments holding massive, global BGP routing tables, or environments acting as centralized FortiManager/FortiAnalyzer endpoints rather than standard firewalls. 3. Sizing Matrix and Performance Guidelines
A good rule of thumb for initial sizing is to match a FortiGate license with a similar number of vCPUs. For example, an FG-VM04 license is typically paired with a 4-vCPU instance like Standard_F4s . fortigate vm sizing azure
High memory availability, strong network bandwidth allocations. Sizing Examples: Standard_D4s_v5 (4 vCPUs, 16 GB RAM) Standard_D8s_v5 (8 vCPUs, 32 GB RAM)
This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later. Your choice of licensing impacts how you can
| License Tier | Max Throughput (Firewall) | Max Throughput (Threat Protection) | vCPU Limit (Soft) | | :--- | :--- | :--- | :--- | | | 1 Gbps | 500 Mbps | 2 vCPU | | VM02 | 2 Gbps | 1 Gbps | 2 vCPU | | VM04 | 5 Gbps | 2.5 Gbps | 4 vCPU | | VM08 | 10 Gbps | 5 Gbps | 8 vCPU | | VM16 | 20 Gbps | 10 Gbps | 16 vCPU | | VMXL | Unlimited* | Unlimited* | Unlimited* |
Balanced workloads or when more RAM is needed for heavy logging/reporting. Standard_D2s_v5 , Standard_D4s_v5 3. Licensing vs. Azure Size For example, an FG-VM04 license is typically paired
For any mission-critical deployment, a single VM is a single point of failure. FortiGate-VM supports several HA architectures on Azure.
Ensure Azure Accelerated Networking is enabled on all data interfaces during deployment. It cannot be enabled retroactively on existing NICs without deleting and recreating them.
This 3,000+ word guide will walk you through the anatomy of FortiGate VM sizing in Azure, covering SKU selection, throughput calculations, licensing models, high availability (HA) implications, and real-world deployment patterns.
Note: Sizing metrics are estimates based on standard enterprise traffic mixes. Actual performance varies based on average packet size (IMIX), session duration, and specific security profiles enabled. 4. Architectural Sizing Considerations