FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Community Manager
Community Manager
Article Id 192716


This article describes how to trace-route using the SD-WAN interface.



FortiGate v7.0.1.


By default, self-originating traffic, such as Syslog, FortiAnalyzer logging, FortiGuard services, remote authentication, and others, relies on routing table lookups to determine the egress interface that is used to initiate the connection.
Policy routes generated by SD-WAN rules do not apply to this traffic.
To traceroute traffic that passes through the SD-WAN rule we can use the commands below:
nitrogen-kvm06 # execute traceroute-options 
device           <----- Auto | <ifname>.
queries          <----- Integer value to specify number of queries per hop.
source           <----- Auto | <source interface IP>.
use-sdwan        <----- Use SD-WAN rules to get output interface <yes | no>.
view-settings    <----- View the current options of traceroute.