Technical Tip: Tabulating the data in the Application widgets in FortiView Secure SD-WAN Monitor

This article describes how to tabulate the data widget for the Application Performance and the Application Bandwidth Utilization for GUI navigation view of,

FortiView -> Monitor -> Secure SD-WAN Monitor (v7.0 & v7.2)

FortiView -> SD-WAN -> Secure SD-WAN Monitor (v7.4)

There are three widgets in the Secure SD-WAN Monitor that provides visibility for user application over the SD-WAN network which are:

1. Application Bandwidth Utilization.  
2. Per-Application Performance.
3. Global-Application Performance.

v7.0 & v7.2:

v7.4:

These data allow for various application logging for SD-WAN health information which included latency, jitter, packet loss, and bandwidth. FortiGate side will have to send the SD-WAN event logs with Log ID: 0113022936 to have this widget tabulated.

1. The FortiGate side will need to have and rely on the following configuration settings to achieve and tabulate these three widgets.
   
   
2. The following sample config highlighted in red is mandatory. Most of the config is done via the CLI only, but a few corresponding GUI configurations are illustrated in this article.
   
   

3. The trade-off to having this data tabulated is to disable the traffic acceleration feature on the Firewall policy (set auto-asic-offload disable)’

   .

Note:

The 'Manual' interface selection strategy type does not support this type of event log. The supported values are 'Best Quality', 'Lowest cost (SLA)', and 'Maximize bandwidth (SLA)'.

CLI:

config system sdwan
    config health-check
        edit 8.8.8.8
            set detect-mode passive
            set sla-fail-log-period <value>
            set sla-pass-log-period <value>
        next
    end

    config service
        edit 1
            set mode priority  <- Best Quality.
            set internet-service enable
            set internet-service-name <applications>
            set health-check "8.8.8.8"
            set priority-members <interface ID>
            set passive-measurement enable
        next

        edit 2
            set mode sla <- Lowest cost (SLA).
            set internet-service enable
            set internet-service-name <applications>
            config sla
                edit "8.8.8.8"
                    set id <SLA ID>
                next
            end
            set priority-members <interface ID>
            set passive-measurement enable
        next

        edit 3
            set mode load-balance <- Maximize bandwidth (SLA).
            set internet-service enable
            set internet-service-name <applications>
            config sla
                edit "8.8.8.8"
                    set id <SLA ID>
                next
            end
            set priority-members <interface ID>
            set passive-measurement enable
         next
     end
end

config firewall policy
    edit 1
        set passive-wan-health-measurement enable
        set utm-status enable
        set application-list "g-default"
        set auto-asic-offload disable
    next
end

GUI:

Set the detect mode to Passive. 

Best Quality settings.

Lowest cost (SLA) settings.

Maximize bandwidth (SLA) settings.

Related article:

Technical Tip: FortiView Secure SD-WAN Monitor.