For scripted deployments, you can use virt-install . Here's an example command:
For users of Fortinet's industry-leading security platform, the file is the key to unlocking these virtual benefits.
Unlike hardware appliances that come with fixed interface counts and performance ceilings, the fortios.qcow2 image transforms any compatible x86 or ARM64 server into a fully featured FortiGate security gateway. It supports the full range of FortiOS security features—from stateful firewall and intrusion prevention (IPS) to secure SD‑WAN, VPN, web filtering, and SSL inspection. This means you can provide the same security fabric across physical, virtual, and cloud environments without retraining your team or rewriting your policies. fortios.qcow2
: Add a second virtual disk (e.g., 30 GB+) for logs and data. ⌨️ Step 3: Deployment Commands (KVM/QEMU) Use virt-install to build the VM around the existing image:
If you are migrating from a VMware environment ( .vmdk ) to KVM, you can convert the image using the qemu-img tool: qemu-img convert -f vmdk -O qcow2 input_file.vmdk fortios.qcow2 Conclusion For scripted deployments, you can use virt-install
(QEMU Copy-On-Write) format is optimized for KVM environments, making it incredibly lightweight and efficient. It doesn't just sit there; it scales. It allows you to deploy a fully functional firewall—complete with IPS, SD-WAN, and advanced routing—without ever touching a piece of hardware. Why Lab Builders Love It The beauty of the
Beyond the Box: Mastering Your Network Lab with fortios.qcow2 It supports the full range of FortiOS security
However, this reliance on a disk image introduces the need for "image hygiene." Because fortios.qcow2 files can be easily copied, administrators must ensure strict access controls. An unauthorized copy of a licensed qcow2 image could theoretically be used to spin up a rogue firewall instance or, conversely, analyzed to understand the internal structure of the proprietary OS. Therefore, the management of these files is a critical component of the hypervisor’s own security model.
If you are setting up this appliance for a specific environment, let me know: What are you deploying this on? What FortiOS version are you planning to use?
For network engineers, this file format facilitates a "Lab-in-a-Box" approach. By downloading fortios.qcow2 , an engineer can spin up multiple instances of FortiGate firewalls on a single laptop or server using tools like GNS3 or EVE-NG. This democratizes access to enterprise-grade security features, allowing professionals to study for certifications or test network topologies without purchasing expensive physical hardware.