Azure [better] | Fortigate Vm Sizing

| Feature | BYOL | PAYG | | :--- | :--- | :--- | | | You purchase a perpetual or annual license from a Fortinet partner. | The license is included in the hourly cost of running the VM. | | VDOM Support | Supported (critical for virtual domains/multi-tenancy). | Not supported (billed as a single entity). | | Activation | Requires manual license file upload after deployment. | Activated immediately upon VM creation. | | Cost | Typically lower for stable, 24/7 workloads. | Better for burstable, unpredictable, or short-term workloads. | | Flexibility | Licenses are tied to a specific vCPU count. Resizing requires a new license. | VM size can be adjusted; the PAYG license is tied to the compute instance. |

. This feature offloads traffic processing to the hardware, but it only works on certain Azure sizes (typically those with 2 or more vCPUs). Alex’s Quick Sizing Guide

: A minimum of 8 GB RAM is recommended for standard operation. For advanced features like Unified Threat Management (UTM) or Zero Trust Network Access (ZTNA), at least 4 GB is strictly necessary. fortigate vm sizing azure

In 2026, with the increasing complexity of cloud workloads, proper sizing involves analyzing throughput, network connectivity requirements, and the specific security features enabled. This guide covers how to size your FortiGate VM in Azure for optimal performance. 1. Key Factors for FortiGate VM Sizing in Azure

For example, an Standard_F4sv2 VM offers a maximum of 4,000 Mbps (4 Gbps) of Azure network bandwidth. No matter how efficiently FortiOS processes packets, the VM cannot exceed this cloud-enforced ceiling. Accelerated Networking (SR-IOV) | Feature | BYOL | PAYG | |

Deploying a FortiGate Next-Generation Firewall (NGFW) in Microsoft Azure requires a strategic approach to "right-sizing" to balance high-performance security with cloud cost-efficiency. Unlike physical appliances with fixed hardware, a FortiGate-VM’s power is determined by the Azure instance type it runs on and the Fortinet license applied to it. 1. Understanding the Licensing-Instance Link

Small branch office, basic routing, or management-only VNet. Standard_F4sv2 / Standard_D4ds_v4 | Not supported (billed as a single entity)

Shutdown the VM from the Azure Portal to allow resizing. Resize: Change the instance size under the "Size" menu.

FortiOS requires sufficient memory to maintain session tables, routing tables, and system management overhead. A deficit in RAM can trigger FortiGate's "Conserve Mode," where the firewall drops packets or limits security scanning to protect system stability. The vCPU-to-RAM Golden Ratio

Note: Always refer to the latest Fortinet Azure Sizing Guide (FortiOS 7.4+) and Microsoft’s VM documentation, as both companies update performance data quarterly.

As you scale from 2 to 4, 8, or 16 vCPUs, the percentage of compute dedicated to the data plane increases linearly, providing better throughput scaling per core. Azure Compute Families for FortiGate