Skip to main content
brainer
brainer
New Member
April 24, 2020
Question

Fortigate Traffic flow SD WAN

  • April 24, 2020
  • 1 reply
  • 5003 views

Hello Community

 

I have a question about traffic flow in sdwan. in which order is the firewall policy, sd wan policy, traffic shaping are handled.

 

Best Regards,

 

Bernhard

1 reply

Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
April 24, 2020

https://help.fortinet.com/fos60hlp/60/Content/FortiOS/fortigate-life-of-packet/lop-packet-flow-ingress-egress.htm

 

This is the closest I could find in my on-line search. Looks like SD-WAN is processed as a part of routing (basically policy routes). Then multiple phases(components) of policy are examined in following phases. Traffic shaping decisions seem to come up almost at the end before sending into the protocol stack.

localhost
localhost
Visitor III
April 25, 2020

Yes - The 'life of packet' document is most likely what you were looking for.

 

SD-Wan rules are basically fancy policy routes.

Routing order looks like this.

 

1. Policy routing lookup

2. SD-WAN routing lookup

3. FIB routing lookup (routes from routing protocols, static routes, connected interfaces)

 

If a valid route entry was found it looks and applies the matching firewall policy.

If the Fortigate is unable to find a matching policy the packet is dropped.

Terms & ConditionsAccessibility statement