Forum Discussion

MohamedT_Trabelsi's avatar
MohamedT_Trabelsi
Brass Contributor
Nov 18, 2022

Backup fortigate Firewall VM with Azure Backup (Solution)

The documentation is simple and it is based on screenshots (step by step)

Unfortunately, Azure Backup does not allow backup of a Fortigate VM (or most appliances in the Azure Marketplace).
Only Azure approved distributions are supported: https://learn.microsoft.com/en-us/azure/backup/backup-support-matrix

 

Example of the error obtained when you launch the backup of a fortigate VM?

 

{"code":"DeploymentFailed","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.","details":[{"code":"Conflict","message":"{\r\n \"status\": \"Failed\",\r\n \"error\": {\r\n \"code\": \"ResourceDeploymentFailure\",\r\n \"message\": \"The resource operation completed with terminal provisioning state 'Failed'.\",\r\n \"details\": [\r\n {\r\n \"code\": \"UserErrorUnSupportedDistribution\",\r\n \"message\": \"Unsupported OS version for virtual machine backup.\"\r\n }\r\n ]\r\n }\r\n}"}]}

 

---> The agent cannot install correctly in the Fortigate VM

A solution ?

----> through snapshots in Azure Backup.

 

We can make a small LAB that already contains the configured Fortigate VM.

 

 

 

1- Create a Recovery Service Vault

 

 

 

Go to  'RSV'  --->  Backup Center 

 

 

Then, Click on VAULT

 

You must choose, Backup Vault 

 

 

you have to choose the necessary parameters : 

 

The next step is to create the Policy, 

 

You muste choose the Datasource type : Azure Disks and the right Vault type also. 

 

Here, you configure the policy as you need. (Choose the right parameters)

 

Here, you choose the configuration according to your need.

 

2- Now we need to add the necessary permissions

- Permission on the disks of the VM fortigate

 

Go to the disks of the VM fortigate and follow the screenshots : 

 

Click “Add role assignment”, then “disk backup reader” role.

 

 

Give the role to the Vault. 

 

the documentation is not complete due to an error, I will re-upload it

 

Resources