Technical Tip: Steer the Application traffic with SD-WAN rule

[rtichkule]

Description	This article describes how to enable application traffic with an SD-WAN rule in FortiGate.
Scope	FortiGate.
Solution	For well-known applications, FortiGuard services and SD-WAN rules can be used to direct traffic per application or application category. The visibility of application detection is disabled by default in the FortiGate GUI. The option to select an application in the destination is not available in the GUI. Only the possibility to select Address and Internet are available, as shown in the picture below.  Enable the feature visibility in the CLI by using the following global command: set gui-app-detection-sdwan enable To enable it from the GUI, go to System -> Feature Visibility -> Additional Features and select Application Detection-Based SD-WAN:   After enabling the functionality in the CLI, the field is visible for selecting applications, application categories, or groups of applications as SD-WAN rule destination criteria for IPv4 rules. If the functionality is not visible immediately after the change, it is requested to reload the page or log-out and re-log in to the FortiGate will bring back the feature visible. For application-based SD-WAN steering, application control needs to be enabled in the firewall policy. It is possible to find more information about application control in Application control

[mhemambika]

Great Information!!!