SD-WAN interfaces not showing in firewall-policies > Outgoing Interface after FW-upgrade

[Obvita]

After upgrading our FG200E from v7.2.4 build 1396 to v7.2.5 build1517 our configured SD-WAN zone and both of our WAN interfaces no longer show up in the dropdown selection "Outgoing Interface" when editing or creating new firewall policies.

Additional facts I have collected so far:

• I can see and edit the SD-WAN zone under "Network" > "SD-WAN".
• When editing the SD-WAN zone, clicking on "References" delivers no results.
• When editing the SD-WAN members, the dropdown "SD-WAN Zone" shows no selectable entries.
• I can use the configured SD-WAN zone in firewall policies and edit the zone and the members via CLI, so there is a workaround, it seems to be a web-GUI issue

Does anybody know wether this is a (known) issue with the firmware or are there any possible mistakes we could have made in our configuration which just did not pop up until after the upgrade?

[funkylicious]

Hi,

Try clearing the cache or open it in incognito/other browser and see if it persists.

[Obvita]

Hi,
Thanks for your response and input.

I have tried the following additional steps:

• Cleared cache, deleted all cookies
• Tried incognito
• Tried different browsers, some of which I never used before to make sure: Edge, Firefox, Chrome, Brave, Opera

Issue persists. *sigh*

[Faiza_Emam_Delhi]

It seems like you're experiencing an issue with the web GUI of your firewall after upgrading the firmware. The SD-WAN interfaces, as well as the WAN interfaces, are no longer showing up in the "Outgoing Interface" dropdown when editing or creating new firewall policies.

Here are some additional facts that you have collected so far:
1. You can see and edit the SD-WAN zone under "Network" > "SD-WAN".
2. Clicking on "References" under the SD-WAN zone delivers no results.
3. The dropdown for the SD-WAN members shows no selectable entries.
4. You are able to use the configured SD-WAN zone in firewall policies and edit the zone and members via CLI, indicating a workaround.

Based on the information provided, it seems like the issue is specific to the web GUI and not the actual configuration of the firewall. It's possible that the upgrade to v7.2.5 build 1517 has caused a compatibility issue with the web GUI.

To troubleshoot this issue, you can try the following steps:
1. Clear your browser cache and cookies and then try accessing the web GUI again.
2. Try accessing the web GUI using a different web browser to see if the issue persists.
3. Check the release notes for the firmware upgrade to see if there are any known issues or compatibility problems with the web GUI.
4. Contact the firewall vendor's technical support for further assistance. They may be able to provide specific troubleshooting steps or recommend a solution for this issue.

In the meantime, you can continue using the CLI to edit the SD-WAN zone and members as a workaround.

[Obvita]

That looks a lot like Chat-GPT 4. But thanks.

[vsahu · Accepted solution]

Hello Obvita,

Please check the below article, It's an ongoing GUI issue, for more info please raise a TAC case

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Missing-SD-WAN-interface-after-a-fir...

If you create a new dummy SD-WAN zone, virtual-wan-link will be visible and possible to be configured in the firewall policy via GUI.

[jimmyjimmy]

Hi. Doesn't work for me. Tried the guide in the link you mentioned. The CLI commands below.

But it doesn't enable me to assign a policy to WAN port. Please help

config system sdwan

    config zone

        edit test

    end

end