Geo Blocking with SD-Wan enable

[AdrianR]

Hello, I want to make a policy with Geo Blocking in my wan port that's inside an SD-Wan interface, I tried to configure the policy with income interface SD-Wan but it doesn’t work, If I take out my wan from the SD-Wan and configure the policy with income interface wan it works correctly, how can I configure the policy using SD-Wan?

I tried looking online for the answer but couldn’t find anything with SD-Wan, thank for the help!

[AdrianR]

Hello AEK it's a Fortigate 40F OS 7.0.11

[AEK]

Hi Adrian

Try check and share the related traffic logs. They must show the source & destination interfaces and the policy that allowed them.

[ezhupa · Accepted solution]

Hi Adrian, 

You can also configure local-in policies following the below documentation. You just need to adjust it to your own case:
https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/363127/local-in-policy