FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Description SD-WAN Health-check packets are not DSCP marked by default and therefore end up in the default group. Potentially being dropped or dereferenced in favor of prioritized traffic.
Solution From v6.2.4 & 6.4.0, mark DSCP manually from CLI command.
# Config system virtual-wan-link # config health-check edit "Name" set diffservcode ? (<binary> 6 bits binary, range 000000-111111 ) next end
