After upgrading our FG200E from v7.2.4 build 1396 to v7.2.5 build1517 our configured SD-WAN zone and both of our WAN interfaces no longer show up in the dropdown selection "Outgoing Interface" when editing or creating new firewall policies.Additional facts I have collected so far:I can see and edit the SD-WAN zone under "Network" > "SD-WAN".When editing the SD-WAN zone, clicking on "References" delivers no results.When editing the SD-WAN members, the dropdown "SD-WAN Zone" shows no selectable entries.I can use the configured SD-WAN zone in firewall policies and edit the zone and the members via CLI, so there is a workaround, it seems to be a web-GUI issueDoes anybody know wether this is a (known) issue with the firmware or are there any possible mistakes we could have made in our configuration which just did not pop up until after the upgrade?

Explorer

Solved

SD-WAN interfaces not showing in firewall-policies > Outgoing Interface after FW-upgrade

7 replies
13899 views

After upgrading our FG200E from v7.2.4 build 1396 to v7.2.5 build1517 our configured SD-WAN zone and both of our WAN interfaces no longer show up in the dropdown selection "Outgoing Interface" when editing or creating new firewall policies.

Additional facts I have collected so far:

I can see and edit the SD-WAN zone under "Network" > "SD-WAN".
When editing the SD-WAN zone, clicking on "References" delivers no results.
When editing the SD-WAN members, the dropdown "SD-WAN Zone" shows no selectable entries.
I can use the configured SD-WAN zone in firewall policies and edit the zone and the members via CLI, so there is a workaround, it seems to be a web-GUI issue

Does anybody know wether this is a (known) issue with the firmware or are there any possible mistakes we could have made in our configuration which just did not pop up until after the upgrade?

FortiGate

A

Anonymous_UserAnswer

Esteemed Contributor III

Hello Obvita,

Please check the below article, It's an ongoing GUI issue, for more info please raise a TAC case

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Missing-SD-WAN-interface-after-a-firmware/ta-p/260152

If you create a new dummy SD-WAN zone, virtual-wan-link will be visible and possible to be configured in the firewall policy via GUI.

funkylicious

SuperUser

Hi,

Try clearing the cache or open it in incognito/other browser and see if it persists.

"jack of all trades, master of none"

ObvitaAuthor

Explorer

Hi,
Thanks for your response and input.

I have tried the following additional steps:

Cleared cache, deleted all cookies
Tried incognito
Tried different browsers, some of which I never used before to make sure: Edge, Firefox, Chrome, Brave, Opera

Issue persists. *sigh*

Faiza_Emam_Delhi

Visitor III

It seems like you're experiencing an issue with the web GUI of your firewall after upgrading the firmware. The SD-WAN interfaces, as well as the WAN interfaces, are no longer showing up in the "Outgoing Interface" dropdown when editing or creating new firewall policies.

Here are some additional facts that you have collected so far:
1. You can see and edit the SD-WAN zone under "Network" > "SD-WAN".
2. Clicking on "References" under the SD-WAN zone delivers no results.
3. The dropdown for the SD-WAN members shows no selectable entries.
4. You are able to use the configured SD-WAN zone in firewall policies and edit the zone and members via CLI, indicating a workaround.

Based on the information provided, it seems like the issue is specific to the web GUI and not the actual configuration of the firewall. It's possible that the upgrade to v7.2.5 build 1517 has caused a compatibility issue with the web GUI.

To troubleshoot this issue, you can try the following steps:
1. Clear your browser cache and cookies and then try accessing the web GUI again.
2. Try accessing the web GUI using a different web browser to see if the issue persists.
3. Check the release notes for the firmware upgrade to see if there are any known issues or compatibility problems with the web GUI.
4. Contact the firewall vendor's technical support for further assistance. They may be able to provide specific troubleshooting steps or recommend a solution for this issue.

In the meantime, you can continue using the CLI to edit the SD-WAN zone and members as a workaround.

ObvitaAuthor

Explorer

That looks a lot like Chat-GPT 4. But thanks.

A

Anonymous_UserAnswer

Esteemed Contributor III

Hello Obvita,

Please check the below article, It's an ongoing GUI issue, for more info please raise a TAC case

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Missing-SD-WAN-interface-after-a-firmware/ta-p/260152

If you create a new dummy SD-WAN zone, virtual-wan-link will be visible and possible to be configured in the firewall policy via GUI.

jimmyjimmy

New Member

Hi. Doesn't work for me. Tried the guide in the link you mentioned. The CLI commands below.

But it doesn't enable me to assign a policy to WAN port. Please help

config system sdwan

config zone

edit test

end

lperazza

New Member

Hi. Any solutions for this problem? may-2025, I try everything mentioned here, the guide in the link, the commands in the CLI, the dummy sd-wan zone..nothings works. I got firmware v7.2.11

Sign up

Login with SSO

Login to the community

Login with SSO