Fortigate performance SLA abnormal behaviour with IPsec over SDWAN -

[Umesh]

Dear All,

I am experiencing issue with IPsec over SDWAN. the issue which I am facing are as flows:-

We have two sites which is configured with IPsec over SDWAN so that I can monitor remote site with using their local IP.

Site 2 Site IPsec tunnel are up and also configured set source ip (x.x.x.x) under config sys sdwan>config members  .

but still performance SLA is not coming up. I troubleshooted.

1. Routing (static routing)

2. Policy 

3.  phase 2 selector 

4. SDWAN rule

5. Performance SLA

6. Set source IP

even after all the troubleshooting performance SLA is not coming up.

Firmware version - 7.2.11

Need your prompt response & help to address this issue.

Thank you 

[rosatechnocrat]

Which performance SLA you are using, is it AWS_Default or your own custom

[rosatechnocrat]

If using AWS_Default, Hope you are aware of the article published recently , disabling AWS_Probe

https://www.youtube.com/live/YeAVl55olss?si=vzubt79WdPcnt-pl