fortinet/fortiweb-ha

Deploy FortiWeb HA on Amazon AWS and Microsoft Azure

FortiWeb HA

Version 1.0.8

This project contains the code and templates for the Amazon AWS and Microsoft Azure Fortiweb HA deployments.

This project is organized in separate node modules:

• fortiweb-ha/azure contains a template for the deployment of Fortiweb HA on the Microsoft Azure platform API.
• fortiweb-ha/aws contains templates and lambda function for the deployment of Fortiweb HA on the AWS SDK platform API.

The project also contains a deployment script that can generate packages for each cloud service's serverless implementation.

Supported Platforms

This project supports Fortiweb HA for the cloud platforms listed below.

• Amazon AWS
• Microsoft Azure

Deployment Packages

To generate local deployment packages:

1. Clone this project.
2. Run ./script/make_dist.sh at the project root directory.

Deployment packages as well as source code will be available in the dist directory.

Package Name	Description
fortiweb-ha-aws-cloudformation.zip	Cloud Formation template. Use this to deploy the solution on the AWS platform.
fortiweb-ha-azure-quickstart.zip	Azure template. Use this to deploy the solution on the Azure platform.

Installation Guides are available from the Fortinet Document Library:

• FortiWeb /Use Case: High Availability for FortiWeb on AWS
• FortiWeb /Use Case: High Availability for FortiWeb on Azure

Support

Fortinet-provided scripts in this and other GitHub projects do not fall under the regular Fortinet technical support scope and are not supported by FortiCare Support Services. For direct issues, please refer to the Issues tab of this GitHub project. For other questions related to this project, contact [email protected].

License

License © Fortinet Technologies. All rights reserved.

fortiweb-ha's Issues

Python 3.6 no longer supported

When trying to deploy the CloudFormation templates it fails to create the Lambda. Reviewing CloudTrail shows that it doesn't like the version of Python.

"errorMessage": "The runtime parameter of python3.6 is no longer supported for creating or updating AWS Lambda functions. We recommend you use the new runtime (python3.9) while creating or updating functions.",
"requestParameters": {
"functionName": "fwbha-findLatestAMI-bab84010",
"runtime": "python3.6",
"role": "arn:aws:iam::394166000478:role/FWAF-BeradHan-StackGetFwbLasterAmi-LambdaFuncRole-1M6TXC2FEB20Y",
"handler": "find_ami.handler",
"code": {
"s3Bucket": "fwaf-has3bucket",
"s3Key": "function/find_ami.zip"
},

I simply switched it to 3.7 and it seemed to run just fine.

FortiWeb HA credential file path. What should be here?

I am getting this error message for the credential_file_path, what should be define here in the vars.tf file.

Changes to Outputs:

• FortiWeb-Username = "admin"
  ╷
  │ Error: Invalid function argument
  │
  │ on main.tf line 11, in provider "google":
  │ 11: credentials = file(var.credentials_file_path)
  │ ├────────────────
  │ │ while calling file(path)
  │ │ var.credentials_file_path is ""
  │
  │ Invalid value for "path" parameter: failed to read file: read .: is a directory.

Azure support

Hello.

I see that this repo says it supports Azure deployment but I see that the Terraform scripts are only written for GCP for resource deployments. All I see under Azure is just a json file. Am I missing something?

Thank you!

John