Skip to main content
JuanManuel_01
JuanManuel_01
New Member
November 30, 2025
Question

Fortinet SDWAN

  • November 30, 2025
  • 3 replies
  • 498 views

Hi

 

We would like to migrate our 2 ISPs to the FG200G for SDWAN configure as load balancer. Our current load balancer, Mushroom, supports a maximum throughput of 300 Mbps. This limits our setup.

 

Question

 

Our current setup is 

 

Mushroom load balancer has four ports: two are connected to our ISPs, one goes to HSIA Xpossible, and the last one goes to the firewall.

 

I would like to decommission the Mushroom load balancer. Can the FG200G handle a large /16 network with a single VLAN for HSIA Xpossible? Have you tried this setup? Do you have any ideas for a more efficient approach?



3 replies

funkylicious
SuperUser
funkylicious
SuperUser
November 30, 2025

hi,

just as a heads up, SD-WAN on FortiGate would benefit for outbound ( traffic destined towards the Internet, not from the Internet ) 

"jack of all trades, master of none"
Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
December 1, 2025

If you want to get any useful/meaningful responses, you should explain more about "Xpossible HSIA Gateway" and how its IP networks including its gateway IP are arranged (https://surfsonix.com/more-info/what-is-an-hsia-gateway-a-complete-guide-for-the-hospitality-industry/).
I'm guessing it's just using the load-balancer's LAN side IP as its gateway, and its traffic doesn't come through the firewall now. Then likely you need to put it behind the new(?) FGT since the FGT would terminate those two ISP circuits.
But at least I don't know anything about either devices and this is beyond this community's boundary.

Then how to set up FGT SD-WAN to load-ballance between two circuits is a separate issue and should be relatively easy once the proper network arrangement is designed. 

 

Toshi

jiahoong112
Staff
jiahoong112
Staff
December 1, 2025

Kindly refer to the FortiGate 200G datasheet to check whether it is sufficient for your network requirements or not: https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/pdf/fortigate-200g-series.pdf 

 

Even though FortiGate is capable of load balancing traffic to a certain extent, I won't suggest relying on it solely for load-balancing purposes if load-balancing is your priority and top use case. From an SDWAN perspective, FortiGate is able to perform load-balancing on outgoing traffic: https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/87794/use-sd-wan-rules-for-wan-link-selection-with-load-balancing 

Terms & ConditionsAccessibility statement