Fortinet Firewall intercepted incorrectly and could not find the corresponding interception policy

[raiden]

The company's intranet penetrates to the cloud server through SD-WAN. Recently, the intranet suddenly became unable to access the server. The problem was located on the Fortinet firewall. After checking the logs, it was found that access to SD-WAN was blocked due to policy violations. The Policy ID was displayed as 0, and this policy could not be found on the policy settings page. How can I solve this problem?

[funkylicious]

hi,

policy id 0 means the implicit deny , the one at the bottom if you have enabled in System > Feature Visibility > Implicit Firewall Policies .

L.E. maybe some routing changes (interfaces/routes were down) and then it used another interface for this traffic, but these are guesses from my side w/o knowing the setup.