Fortigate Vm Sizing Azure Site

Fortinet licensing is strictly tied to vCPU count. This creates a "Tax" on oversizing.


Recommendation: For production >2 Gbps, always choose BYOL with a 3-year commitment. For variable workloads under 1 Gbps, PAYG works but watch your monthly bill. fortigate vm sizing azure


Let’s walk through three actual customer examples. Fortinet licensing is strictly tied to vCPU count

Pros:

Cons:


1. Define required throughput (clean traffic) → ______ Gbps
2. Multiply by 1.5x (future growth) → ______ Gbps
3. Add inspection factor:
   - No inspection: x1.0
   - Basic firewall + NAT: x1.2
   - +IPS: x1.5
   - +SSL inspection: x2.0
   → Effective required Gbps = ______
4. Match to Azure VM size from table in section 3
5. Check license SKU supports that throughput
6. Add 20% vCPU/RAM overhead if using:
   - SSL deep inspection
   - 50+ IPsec tunnels
   - Explicit web proxy
7. Final VM size = ______

Example:
Need 2 Gbps clean + SSL inspection = 4 Gbps effective → D8s v3 + FG-VM04 license. Let’s walk through three actual customer examples