What difference between SD-WAN zone and SD-WAN rules?

[piligrimm]

Hello,

we updated our fortigate to version 6.11 (previously we had version 6.2)

and now there is a new entity sd-wan zone

we have four providers

what's the difference if:

1. create a SD-WAN zone

2. I will set two Internet providers in this zone

3. And assign this zone to a rule in the firewall

AND

1. create a SD-WAN zone

2. I will set all Internet providers in this zone

3. And assign this zone to a rule in the firewall

4. I will create an SD-WAN RULES rule in which I will set a rule for only two providers (from the previous paragraph)

[metz_FTNT]

Hello,

Think of the Zones like different interfaces, you can set up sd-wan zone with members port1 and port2 and set the zone as destination intf in a policy.

Then you can create a specific rules for how to balance the traffic between the interface members in that zone.   

So in your case, you create a zone with two providers, then you need a rule to specify how do you want to utilize the two providers.

Check documentation bellow:

https://docs.fortinet.com/document/fortigate/6.2.12/cookbook/19246/sd-wan