Troubleshooting Tip: Error when importing local-in-policy with SD-WAN Zone into FortiManager

haziqsulaiman · ‎09-23-2025

Description

This article describes how to troubleshoot the issue of being unable to import local-in-policy using SD-WAN Zone from FortiGate into FortiManager.

Scope

FortiManager v7.6.2 and below.

Solution

Users may encounter the following error when trying to import local-in-policy from a managed FortiGate into FortiManager.

import fail.png

The local-in-policy is using an SD-WAN Zone as its interface:

config firewall local-in-policy

edit 1

set srcaddr "test_src"

set dstaddr "test_dst"

set action accept

set service "HTTPS"

set schedule "always"

set intf "virtual-wan-link"

The solution is to either:

Upgrade FortiManager to v7.6.3 or above, which allows local-in-policy to use SD-WAN Zone as the interface, or
Change the local-in-policy in the FortiGate to use interfaces other than the SD-WAN Zone, then import the policy into FortiManager.

The image below shows the successful import of the same local-in-policy after FortiManager is upgraded to v7.6.3:

import success.png

You are leaving our website