Solution: Set the correct machine type:
virt-install --machine q35 ...
You are now wielding a powerful enterprise-grade firewall. The file fgt-vm64-kvm-v7.2.1.f-build1254 is a robust version of FortiOS, stable enough for labs and testing, and powerful enough for production—if you respect the licensing requirements. fgt-vm64-kvm-v7.2.1.f-build1254-fortinet.out.kvm.qcow2
Next Step: Connect to the GUI and run a "Security Fabric Audit" to see how secure your network really is. You are now wielding a powerful enterprise-grade firewall
| Item | Default / First Boot |
|------|----------------------|
| Management IP | DHCP client (eth0 / port1) |
| Fallback IP | 192.168.1.99/24 (if DHCP fails) |
| HTTPS admin | https://<IP>:443 |
| HTTP admin | http://<IP>:80 (redirects) |
| SSH | Port 22 |
| Username | admin |
| Password | (blank / none) – set on first login |
| License | Requires trial or purchased license after boot | | Item | Default / First Boot |
If you are running this in KVM, enabling CPU passthrough (host-passthrough) can significantly increase the performance of the firewall's threat detection engine. In your XML VM config or Virt-Manager settings, change the CPU model to "Host Passthrough".