Technical Tip: Use SD-WAN intelligence for selecti...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 201283

Description

This article describes how to be able to use the best link for communicating FortiGuard servers.

Scope

FortiGate.

Solution

Interface select method options:

auto <----- Set outgoing interface automatically.
sdwan <----- Set outgoing interface by SD-WAN or policy routing rules.
specify <----- Set outgoing interface manually.

config sys fortiguard

(fortiguard) set interface-select-method sdwan

(fortiguard) end

config sys fortiguard

(fortiguard) # show

config system fortiguard

set update-server-location usa

set sdns-server-ip "208.91.112.220"

set interface-select-method sdwan

end

config log fortiguard setting

set status enable

set interface-select-method sdwan

end

1147

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Use SD-WAN intelligence for selecting interface to use in communicating with FortiGuard servers