FortiGate firewall design for Azure Local
Azure Local needs specific outbound access to Azure, and it breaks when traffic is inspected the wrong way. We configure FortiGate so the cluster has the access it needs and every rule is justified to your security team.
Scope of the work
- Build outbound rules for the required Azure endpoints
- Exclude platform traffic from TLS inspection where required
- Segment management, storage, workload and out-of-band networks
- Route between the cluster, the data center and Azure
- Log and report on platform traffic
- A FortiGate policy set for the cluster
- A rule-by-rule justification for your security team
- A connectivity test record
Billed at $150.00 per hour. Ask Keith for an estimate.
What we check first.
Test through the firewall
We test each required endpoint from the machines themselves, through the real policy.
Inspection breaks registration
Certificate substitution on Azure management traffic fails registration and updates. Exclusions are scoped as narrowly as possible.
Endpoint lists change
The required endpoints change between releases. We leave a procedure for reviewing them at each update.
Four steps, written down.
A call with Keith
You describe the goal, the estate and the deadline. Keith turns it into a written scope with an hour estimate at the hourly rate.
A written design by Gus
Gus reviews the environment and gives you a written design with each decision and its reason.
Hands-on implementation
Gus implements in your tenant and your racks, remotely or on site, with every change logged as it is made.
Documents and a named contact
You receive the as-built record and the runbooks. Keith stays on as your account and project manager.
Asked before every engagement.
Can outbound access be limited to a short list?
Yes. Azure Local documents its required endpoints, and options such as a gateway service can reduce the list further. We implement the tightest set that works.
Do you manage FortiGate long term?
We can, by the hour, as part of operations support.
What does the consulting cost?
Consulting is billed at $150.00 per hour. Keith sends a written hour estimate after the scoping call, and work starts when you approve it.
Often scoped together.
One rate. Two people.
Consulting is billed at $150.00 per hour. Keith runs sales, project management and your account. Gus does the architecture, the design and the implementation.
per consulting hour, for every consulting service