Fortigate Vm Sizing Azure ((full)) May 2026
Deep Inspection
Sizing a FortiGate VM in Azure for (SSL/TLS decryption) is CPU-intensive and requires careful alignment between Azure instance capabilities and Fortinet licensing. For reliable performance with deep inspection enabled, a minimum of 4 GB RAM is recommended. Core Sizing Considerations
FortiGate is a popular network security appliance that provides advanced threat protection, firewall, and VPN capabilities. In Azure, FortiGate can be deployed as a virtual machine (VM) to secure your cloud infrastructure. However, sizing the FortiGate VM correctly is crucial to ensure optimal performance, security, and cost-effectiveness. In this article, we will guide you through the process of sizing a FortiGate VM in Azure. fortigate vm sizing azure
| Use Case | Recommended VM Size (BYOL) | License | Expected Throughput | |----------|----------------------------|---------|----------------------| | Small branch / Dev test | D2sv5 (2 vCPU, 8 GB) | PAYG | 300–500 Mbps | | Medium enterprise hub | D4sv5 (4 vCPU, 16 GB) | BYOL | 1–1.5 Gbps | | IPS + SSL inspection (1 Gbps) | E8sv5 (8 vCPU, 64 GB) | BYOL | 800 Mbps – 1.2 Gbps | | VPN concentrator (500 users) | F8sv2 (8 vCPU, 16 GB) | BYOL | 1.5 Gbps IPSec | | Large perimeter (>2 Gbps) | E16sv5 (16 vCPU, 128 GB) | BYOL | 4–6 Gbps | Deep Inspection Sizing a FortiGate VM in Azure
- Required: IPsec + minimal inspection
- Recommendation: Standard_F4s_v2 (4 vCPUs) + VM04 license
- Why F-series: Better AES-NI crypto performance than D-series.
- Choose VM size based on expected throughput, number of concurrent sessions, SSL inspection needs, and features (IPS, AV, web filtering, VPN, SD‑WAN). Azure VM vCPU/RAM/Network determines raw capacity; FortiGate feature sets and licensed vCPU count determine inspected throughput.
- The Azure VM Instance Type: Determines raw CPU power and network bandwidth limits.
- The Fortinet License Tier: Artificially caps throughput based on the entitlement purchased.
- The Workload Profile: Inspection requirements (SSL VPN, IPS, Application Control).