Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

SD-WAN VPN to multiple locations with multiple ISPs

I'm working on learning the capabilities of the FortiNet SD-WAN features.  Using this guide I've been able to connect SiteA and SiteB, each with multiple ISPs.  The SD-WAN features are working correctly and I'm quite happy with the setup.  Now I'm bringing SiteC into the picture.  SiteC's setup should be no different than SiteB really.  The question is at SiteA.  When I'm setting up the SD-WAN zone for connections between SiteA and SiteC, do I put the connections under the same zone that's used to connect SiteA and SiteB?  Or would I want to create a completely different Zone? 


Background, big picture, end game, if it makes any difference, is Hub & Spoke but then enabling the Route Reflection (I believe it's called) so that SiteB and SiteC can talk directly together without all their traffic going through SiteA. 




If site B and site C are redundant (same internal network), you can put IPsec interfaces in the same zone in site A. But I don't think that is the case for your scenario.


It is better to put IPsec interfaces for site B and site C in separate SDWAN zone on site A. For hub and spoke, please refer to



New Contributor

SiteB and SiteC are separate networks, and  So on SiteA they should be 2 different SDWAN zones.  Is that because of routing? 

Top Kudoed Authors