We use it on a virtual machine in our data center. We are not using a box.
We have many types of clients so there are many types of use cases for our clients who we are deploying FortiGate for on-site to create the local network. Many sites are using FortiGate firewalls like 60E, 100E, 200E and 500E and some 3100D.
We are using what we call zero-touch deployment. It is a very important technology or process that helps us to make the deployments efficiently. It is called zero-touch deployment or ZTD. It helps us to implement our configuration on these client sites by using FortiManager. Zero-touch deployment is the central piece here and it is made possible by the use of FortiManager. What happens is we prepare our configuration in the FortiManager. After that, the technicians who are doing the installation just need to connect the instance of FortiGate to the internet. They only have to do that and FortiGate automatically downloads the configuration from FortiManager. So this is the way we can optimize the implementation and reduce the duration of the setup time involved.
It would normally take us a handful of days to install one FortiGate instance on one site. But with this technology, zero-touch deployment, we need just one hour or maybe as little as 30 minutes to install one site. It is much more efficient. We reduce the time further by installing the configuration in all the FortiGate instances that we are managing at the same time. For example, say we need to install a new policy to deny or to allow something to connect to the internet. We can create this configuration in the FortiManager and we can push it out to 100 or 200 FortiGate instances at the same time. So it helps us to reduce the time it takes to install and to perform maintenance as well as to minimize the errors. We are human so errors are more frequent than a deployment managed by a machine. With this process, if anything is wrong it is also easier to correct.