SD WAN SLA Performance puts WAN down after Update to 7.4.5

[RolandBaumgaertner72]

Hello,

this happens now the second time with 2 different FG60 clusters. We have support tickets open but sofar no solution.

This time we had 7.4.4 SD Wan configuration and working fine now for at least 3 months. Today we updated to 7.4.5 (we had conserve mode issue) and right away we get problems with the SLA Performance and since it puts down WAN2 interface I only have read only access from the Forticloud. I can access via WAN1 and the MPLS but I am not in the office now.

We had standard SLA performance rules:

1. Cloudflare ping to 1.1.1.1
>WAN1 OK
>WAN2 DOWN
2. Default DNS ping to FG DNS
>WAN1 OK
>WAN2 OK
3. Google Ping to 8.8.8.8
>WAN1 OK
>WAN2 DOWN

I really dont understand. I see in Fortiview that there are 500 sessions over WAN2 to the internet, it is working but since SLA performance kills the route, I dont have access from outside to the public IP.

What is the issue? Anybody else with the same problem? Any suggestions?

Thanks!

[HarshChavda]

Hello @RolandBaumgaertner72 

As Fortiview shows 500 active sessions over WAN2  indicates that traffic is indeed passing through WAN2 but the SLA might incorrectly flag the WAN as down due to intermittent performance issues.

You can also check out these below documents

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-SD-WAN-performance-SLA-down/ta-p/217...

https://community.fortinet.com/t5/Support-Forum/SD-WAN-Performance-SLAs-showing-link-down-on-wifi-th...

[hbac]

Hi @RolandBaumgaertner72,

Please refer to this article for Performance SLA troubleshooting: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-SD-WAN-performance-SLA-down/ta-p/217...

Regards,