Outbound NAT with SD-WAN

[pokatlo2]

Hoping someone can point me in the right direction to discover how outbound NAT can be applied in an SD-WAN configuration. Running 6.0.6

We have WAN1 and WAN2 in the SD-WAN interface. Both have /29 addresses. I need the Exchange server to use the 2nd available host address on the WAN interfaces for Outbound. But the WAN interfaces are not available options for destination interfaces, only the SD-WAN interface.

Is there a way to accomplish this that I am just not seeing?

Thanks,

[Toshi_Esumi]

The firewall policy's destination should be the SD-WAN interface. It's an SD-WAN rule that can specify which physical interface in the zone to go out for specific traffic like a source IP on the exchange server. Just choose "Manual" then specify the WAN interface the traffic needs to go out in "Outgoing Interfaces" section.

Toshi

[hhasny]

You can try using ippool with the 'associated-interface'.

Refer to this link:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-associate-a-NAT-pool-IP-pool-to-a-p...

https://docs.fortinet.com/document/fortigate/6.0.0/cli-reference/438955/firewall-ippool-ippool6

I hope this helps.

best regards,