FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Description To select the individual interface of SD-WAN config is possible. This is helpful to configure the traffic shaping only for specific SD-WAN member not for both.
This article describes this feature.
Solution GUI steps:
Go to Policy and Object -> Traffic shaping policy, Create New and Select it under option called 'Outgoing interface':
To Verify go to FortiView -> Traffic Shaping.
# config firewall shaping-policy edit 1 set service "<ALL/Required port>" set schedule "always" set dstintf "<interface name>" <----- Select one of the SD-WAN member here. set traffic-shaper "<respective traffic shaper name>" set traffic-shaper-reverse ""<respective traffic shaper name>" set srcaddr "all" set dstaddr "all" end
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.