Technical Tip: Tabulating the data in the Application widgets in FortiView Secure SD-WAN Monitor

heng · ‎11-13-2022

Description

This article describes how to tabulate the data widget for the Application Performance and the Application Bandwidth Utilization for GUI navigation view of,

FortiView -> Monitor -> Secure SD-WAN Monitor (v7.0 & v7.2)

FortiView -> SD-WAN -> Secure SD-WAN Monitor (v7.4)

There are three widgets in the Secure SD-WAN Monitor that provides visibility for user application over the SD-WAN network which are:

Application Bandwidth Utilization.
Per-Application Performance.
Global-Application Performance.

v7.0 & v7.2:

v7.4:

These data allow for various application logging for SD-WAN health information which included latency, jitter, packet loss, and bandwidth. FortiGate side will have to send the SD-WAN event logs with Log ID: 0113022936 to have this widget tabulated.

Scope

FortiAnalyzer version v7.0 and above.

Solution

The FortiGate side will need to have and rely on the following configuration settings to achieve and tabulate these three widgets.
The following sample config highlighted in red is mandatory. Most of the config is done via the CLI only, but a few corresponding GUI configurations are illustrated in this article.
The trade-off to having this data tabulated is to disable the traffic acceleration feature on the Firewall policy (set auto-asic-offload disable)’
.

Note:

The 'Manual' interface selection strategy type does not support this type of event log. The supported values are 'Best Quality', 'Lowest cost (SLA)', and 'Maximize bandwidth (SLA)'.

CLI:

config system sdwan
config health-check
edit 8.8.8.8
set detect-mode passive
set sla-fail-log-period <value>
set sla-pass-log-period <value>
next
end

config service
edit 1
set mode priority <- Best Quality.
set internet-service enable
set internet-service-name <applications>
set health-check "8.8.8.8"
set priority-members <interface ID>
set passive-measurement enable
next

edit 2
set mode sla <- Lowest cost (SLA).
set internet-service enable
set internet-service-name <applications>
config sla
edit "8.8.8.8"
set id <SLA ID>
next
end
set priority-members <interface ID>
set passive-measurement enable
next

edit 3
set mode load-balance <- Maximize bandwidth (SLA).
set internet-service enable
set internet-service-name <applications>
config sla
edit "8.8.8.8"
set id <SLA ID>
next
end
set priority-members <interface ID>
set passive-measurement enable
next
end
end

config firewall policy
edit 1
set passive-wan-health-measurement enable
set utm-status enable
set application-list "g-default"
set auto-asic-offload disable
next
end

GUI:

Set the detect mode to Passive.

Best Quality settings.

Lowest cost (SLA) settings.

Maximize bandwidth (SLA) settings.

Related article:

Technical Tip: FortiView Secure SD-WAN Monitor.