Fortigate CNF Hands-on Lab

1. Verify access

1.1 AWS Console login

You can download following file for login credentials (including FortiAnalyzer token IDs).

AWS & FortiCloud Credentials

account_id / studentxpert / <password is in the credentials file>

AWS Console Login

1.2 FortiCloud / FortigateCNF login

student<xx>@kubiosec.tech / <password is in the credentials file>

FortiGate CNF Login

2. Prepare the lab environment

2.1 Cloud9 AWS environment

Use AWS region eu-west-1 (Ireland)
Create an AWS Cloud9 instance using AWS Cloud9 service.

Hint#1 If there is no default VPC, create one using AWS console.
Hint#2 While creating a Cloud9 environment, choose SSH option under Network settings. Hint#3 Do use 2CPU instance size

2.2 AWS access key and secret

Key and secret is shared in credentials file. We will use the access key and secret for later usage during deployment.

2.3 Subscribe to following AWS Marketplace images

Click "Continue to Subscribe", then accept terms and conditions.

Ubuntu-Jammy
Ubuntu
Ubuntu for EKS
FortiAnalyzer
FortiGate CNF
Note: "Try for free" to activate 30-day Free Trial. If portal says "Trial is ended", continue with selecting specific Offer ID from dropdown list (PAYG).

2.4 Clone the lab repository to Cloud9 instance

Clone following repo in /environment in your Cloud9 environment.

git clone https://github.com/ozanoguz/fortigate-cnf-sse-workshop.git

3. Deploy lab environments

3.1 LAB-1: Deploy a FortiGate CNF playground for Intra-subnet / Single VPC scenario

See lab1

3.2 LAB-2: Deploy a FortiGate CNF playground for Transit Gateway (TGW) use-case

See lab2

4. CLEAN-UP

At the end of our session:

• Remove the endpoints form your TF variables.tf
• Re-apply your Terraform
• Destroy your Terraform infrastructure
• Remove all Fortigate CNF instances from the Fortigate CNF UI
• Remove all registered accounts from the Fortigate CNF UI
• Remove Cloudformation FortinetFWaaSCrossAccountSetup from AWS region Oregon
• Remove the access key and secret (NOT the IAM user !!)
• Remove your Cloud9 instance

Thanks, the next student will thank you as well as the instructor who knows your name ;-)