Section 2: Deployment and Provisioning

2.1 Subscribe to the FortiGate BYOL AMI

Before deploying the CloudFormation stack, subscribe to the FortiGate BYOL AMI in AWS Marketplace.

1. Open the FortiGate BYOL Marketplace listing.

2. Select View purchase options.

   

3. Select Subscribe at the bottom of the page.

   

4. The Subscribe button may remain unavailable for several minutes while AWS processes the request.

   

5. Wait until AWS confirms that the subscription is complete.

   

2.2 Deploy the Lab Environment

1. Log in to the AWS Management Console.

2. Launch the CloudFormation template provided for the workshop.

   The original guide uses a one-click Launch Stack button. Add the exact CloudFormation template URL to this page when available.

3. Confirm that the AWS Cape Town Region is selected:

   af-south-1

4. Configure the stack parameters:

   Parameter	Value
   Stack name	Your student ID, for example Student01
   KeyPair	The SSH key created in Section 1.2
   ClientIP	Your public IP address in CIDR format, for example 203.0.113.10/32
   LicenseType	BYOL

   TIP

   You can use a public IP lookup service to identify your current public IP address. Append /32 so that only your current IP address is allowed.

   

   

   

   

5. Select Next through the remaining CloudFormation pages.

6. Review the configuration and select Create stack.

2.3 Access the Deployed Resources

Wait until the CloudFormation stack status changes to:

CREATE_COMPLETE

Open the Amazon EC2 console and locate the FortiGate instance.

Use the following initial credentials:

Field	Value
Username	admin
Initial password	FortiGate EC2 instance ID

Example instance ID:

i-0a1b2c3d4e5f6g7h8

WARNING

The FortiGate GUI may take several minutes to become available after the CloudFormation stack reaches CREATE_COMPLETE.

Next Step

Continue to Section 3: FortiGate Preparation.