FortiGate site-to-site VPN to Azure
A hybrid design needs a private path between your site and Azure. We build IPsec tunnels from FortiGate to Azure with dynamic routing and tested failover.
Scope of the work
- Plan address space so on-premises and Azure ranges do not overlap
- Build IPsec tunnels to the Azure VPN gateway
- Configure BGP for dynamic routing and failover
- Add a second tunnel or second device for redundancy
- Test failover and measure throughput
- Working redundant tunnels between site and Azure
- A routing diagram and address plan
- A failover test record
Billed at $150.00 per hour. Ask Keith for an estimate.
What we check first.
Overlapping ranges
Address overlap is the most common blocker and the most expensive to fix later. We check it first.
Policy-based or route-based
We use a route-based Azure gateway with a route-based FortiGate tunnel and BGP. Policy-based peers can connect to a route-based gateway with traffic selectors, but without BGP.
Throughput
The gateway size and the firewall model both cap throughput. We size both for the traffic.
Four steps, written down.
A call with Keith
You describe the goal, the estate and the deadline. Keith turns it into a written scope with an hour estimate at the hourly rate.
A written design by Gus
Gus reviews the environment and gives you a written design with each decision and its reason.
Hands-on implementation
Gus implements in your tenant and your racks, remotely or on site, with every change logged as it is made.
Documents and a named contact
You receive the as-built record and the runbooks. Keith stays on as your account and project manager.
Asked before every engagement.
Is a VPN enough, or do we need a private circuit?
A VPN is enough for management and moderate traffic. Large, steady or latency-sensitive traffic may justify a private circuit.
Can Azure Local management traffic use the VPN?
Management traffic normally goes to public Azure endpoints. Private options exist for some services and we design them where required.
What does the consulting cost?
Consulting is billed at $150.00 per hour. Keith sends a written hour estimate after the scoping call, and work starts when you approve it.
Often scoped together.
One rate. Two people.
Consulting is billed at $150.00 per hour. Keith runs sales, project management and your account. Gus does the architecture, the design and the implementation.
per consulting hour, for every consulting service