---
name: vpc-vnf-licensed-firewall
title: Deploying a licensed firewall in your VPC
description: You can deploy a licensed next-generation firewall from the IBM Cloud catalog to inspect and secure traffic that enters, leaves, and moves within your VPC. The licensing is applied automatically when the firewall is provisioned, so you don't need to purchase or manage licenses separately.
last-updated: 2026-10-28
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/vpc?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Deploying a licensed firewall in your VPC
{: #licensed-firewall-vpc}

You can deploy a licensed next-generation firewall from the IBM Cloud catalog to inspect and secure traffic that enters, leaves, and moves within your VPC. The licensing is applied automatically when the firewall is provisioned, so you don't need to purchase or manage licenses separately.
{: shortdesc}

Licensed firewall support for VPC is available for Fortinet FortiGate.
{: note}

## What is available
{: #licensed-firewall-vpc-available}

With the licensed firewall for FortiGate, you can deploy the following configurations:

* A single FortiGate virtual server instance
* An active/passive high availability (HA) pair in a single zone
* An active/passive HA pair across zones

## Where to find more information
{: #licensed-firewall-vpc-more-info}

Planning, deployment, configuration, licensing, monitoring, and troubleshooting information for licensed firewalls is available in the licensed firewall documentation.

* [Getting started with Fortinet FortiGate for IBM Cloud VPC](https://cloud.ibm.com/docs/licensed-firewall?topic=licensed-firewall-getting-started&format=markdown)
* [Understanding FortiGate-VM licensing](https://cloud.ibm.com/docs/licensed-firewall?topic=licensed-firewall-understanding-fortigate-licensing&format=markdown)

To deploy a firewall as part of a highly available VNF design that uses a network load balancer with routing mode, see [About highly available VNFs](https://cloud.ibm.com/docs/vpc?topic=vpc-about-vnf-ha&format=markdown).