Fortinet black logo

SD-WAN New Features

7.0.0

SD-WAN passive health check configurable on GUI 7.0.1

SD-WAN passive health check configurable on GUI 7.0.1

SD-WAN passive WAN health can be configured in the GUI.

By enabling passive health check in a policy, TCP traffic on that policy will be used in health check measurements.

To configure passive WAN health check in the GUI:
  1. Go to Network > SD-WAN and select the Performance SLAs tab.

  2. Edit an existing health check, or create a new one.

  3. Set Probe mode to Passive or Prefer Passive.

  4. Configure the remaining settings as needed.

  5. Click OK.

    The SLA list shows the probe mode in the Detect Server column, if the probe mode is passive or prefer passive.

Tooltip

Probe packets can only be disabled in the CLI and when the probe mode is not passive.

To enable passive WAN health measurement in a policy in the GUI:
  1. Go to Policy & Objects > Firewall Policy.

  2. Edit an existing policy, or create a new one.

  3. Set Outgoing Interface to an SD-WAN zone. Passive health check can only be enabled in a policy when the outgoing interface is an SD-WAN zone.

  4. Enable Passive Health Check.

  5. Configure the remaining settings as needed.

  6. Click OK.

SD-WAN passive health check configurable on GUI 7.0.1

SD-WAN passive WAN health can be configured in the GUI.

By enabling passive health check in a policy, TCP traffic on that policy will be used in health check measurements.

To configure passive WAN health check in the GUI:
  1. Go to Network > SD-WAN and select the Performance SLAs tab.

  2. Edit an existing health check, or create a new one.

  3. Set Probe mode to Passive or Prefer Passive.

  4. Configure the remaining settings as needed.

  5. Click OK.

    The SLA list shows the probe mode in the Detect Server column, if the probe mode is passive or prefer passive.

Tooltip

Probe packets can only be disabled in the CLI and when the probe mode is not passive.

To enable passive WAN health measurement in a policy in the GUI:
  1. Go to Policy & Objects > Firewall Policy.

  2. Edit an existing policy, or create a new one.

  3. Set Outgoing Interface to an SD-WAN zone. Passive health check can only be enabled in a policy when the outgoing interface is an SD-WAN zone.

  4. Enable Passive Health Check.

  5. Configure the remaining settings as needed.

  6. Click OK.