FortiOS 7.4 — Best way to route 100+ subnets into an IPsec SD-WAN zone?

Hello yemliha, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Hi Yamliha

Routing protocol is your best solution.

It is also possible to do with much less static routes, but only if the initial subnetting was done in a clean manner, in that case you can have few routes instead of hundreds, but I guess now it is too late.

Eh, why is that "not practical"?? It's a job for an intern, if you have one. /s

If you stick with static routes, just create one address object for each /24, check the "routeable" property, and then collect them all into a routable address group. Use the address group in ONE static route. Done.

Any changes will be changes of the one address group.

If objections of "too much work" arise...

- you can script those addresses easily

- you will need them anyways: first in phase2 of the VPN, then in policies.