Geo Blocking with SD-Wan enable

AdrianR · ‎05-30-2023

Hello, I want to make a policy with Geo Blocking in my wan port that's inside an SD-Wan interface, I tried to configure the policy with income interface SD-Wan but it doesn’t work, If I take out my wan from the SD-Wan and configure the policy with income interface wan it works correctly, how can I configure the policy using SD-Wan?

I tried looking online for the answer but couldn’t find anything with SD-Wan, thank for the help!

ezhupa · ‎06-01-2023

Hi Adrian,

You can also configure local-in policies following the below documentation. You just need to adjust it to your own case:
https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/363127/local-in-policy

View solution in original post

AdrianR · ‎05-31-2023

Hello AEK it's a Fortigate 40F OS 7.0.11

AEK · ‎06-01-2023

Hi Adrian

Try check and share the related traffic logs. They must show the source & destination interfaces and the policy that allowed them.

AEK

ezhupa · ‎06-01-2023

Hi Adrian,

You can also configure local-in policies following the below documentation. You just need to adjust it to your own case:
https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/363127/local-in-policy