Using AWS Elastic Load Balancing with FortiWeb-VM

AWS Elastic Load Balancing (ELB) allows you to automatically distribute public HTTP traffic to multiple instances of FortiWeb-VM deployed on EC2. The load balancer serves as a single point of contact for clients. 

To create this configuration, you first create a virtual load balancer and register FortiWeb-VM instances to it. Then, you configure the FortiWeb-VM instances to work with the load balancer.

In this example, ELB listens for HTTP requests on port 80 and then selects one of two FortiWeb-VM instances on port 8012 to route the traffic to. The FortiWeb-VM then routes the requests to a server pool member.

This example assumes you are already have an Amazon VPC with the following resources:

  • One or more subnets.
  • Two or more instances of FortiWeb-VM on EC2, located on the subnets.
  • One or more security groups. (You can also create a new security group to use when you create the load balancer.)

For detailed information on configuring ELB, see AWS Documentation for Elastic Load Balancing.

1. Configure the load balancer

Open the Amazon EC2 console at

From the navigation bar, select the region where your FortiWeb-VM instances are located.

In the navigation pane, under LOAD BALANCING, click Load Balancers.

Click Create Load Balancer.


For Load Balancer name, enter a name for your load balancer.

For Create LB inside, select the network where the FortiWeb-VM instances are located.

Under Listener Configuration, specify the following options:

  • Load Balancer Protocol – HTTP
  • Load Balancer Port – 80
  • Instance Protocol – HTTP

Under Select Subnets, add one or more subnets to the list of selected subnets.

The Available Subnets list displays the subnets that are available in your VPC.

Select public subnets that are in the same Availability Zones as your FortiWeb-VM instances.

Under Assign Security Groups, select a security group for the load balancer.

Navigate to Configure Health Check, and then specify the following options:

  • Ping Protocol – HTTP
  • Ping Port – 8012
  • Ping Path –/index.html
Under Add EC2 Instances, select the FortiWeb-VM instances.  

Navigate to the Review page, and then click Create.

A message is displayed when the load balancer creation process is complete.

Click Close.

The new load balancer is displayed in the list of load balancers.

In the load balancer details, you can view information about the FortiWeb-VM instances on the Instances tab.  

  2. Configure FortiWeb-VM to use ELB


Log in to the web UI for the FortiWeb-VM instance, and then go to Server Objects > Server > Virtual Server.

Select Use Interface IP and for Interface, select port1.



Create a server pool that contains the servers that the FortiWeb-VM instances route traffic to.




Go to Server Objects > Service > Custom and create a service that uses port 8012.



Create a server policy that uses the virtual server, server pool, and service that you configured earlier.


Repeat the configuration for the other FortiWeb-VM instances that you registered with the load balancer.

3. Access the server pool via the load balancer

Go to the load balancer Description tab.


Enter the DNS Name value in the address field of your Internet-connected web browser.

The browser displays the default page of an HTTP server in the server pool.

For further reading, check out the FortiWeb-VM Install Guide and the FortiWeb Administration Guide.