Skip to main content
ssanga
Staff & Editor
Staff & Editor
January 15, 2025

Technical Tip: SD-WAN Performance SLA 'Default_DNS' Displays 'All Participants of Default_DNS Are Down' After Upgrading FortiGate to v7.6.1

  • January 15, 2025
  • 0 replies
  • 896 views
Description

This article describes an issue observed after upgrading FortiGate to v7.6.1, where the SD-WAN Performance SLA 'Default_DNS' incorrectly shows 'All Participants of Default_DNS Are Down.'

Scope

FortiGate v7.6.1

Solution

After upgrading the FortiGate to v7.6.1, the 'Default_DNS' Performance SLA displays the message 'All Participants of Default_DNS Are Down.'

 

PerfSLA.png

 

SLA details do not show any statistics.

 

SLADetails.png

 

Debugging the link monitor reveals that no probes are being sent from the FortiGate. Despite this, the associated routes remain present in the active routing table.

 

This issue has been resolved in FortiOS version 7.6.3.

 

General debug information required by FortiGate TAC for investigation:

 

  1. Debugs:

 

diagnose sys sdwan health-check

diagnose sys sdwan sla-log Default_DNS 1

diagnose sys sdwan sla-log Default_DNS 2

diagnose debug application link-monitor -1

diagnose debug enable

<wait for 30 seconds>

diagnose debug disable

 

  1. TAC Report:

execute tac report

 

  1. Configuration file of the FortiGate.
  2. Fortinet Support Tool data: Troubleshooting Tip: Collect GUI slowness and errors debugs via Fortinet Support Tool
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!