NSE5-SSE-AD-7-6: Fortinet NSE 5 - FortiSASE and SD-WAN 7.6 Core Administrator

The traffic matches the router policy because both its source and destination addresses fall within the configured subnets. A router-policy action of deny means FortiGate does not search the policy-route table; it therefore uses the normal forwarding information base (FIB) routing decision rather than applying the SD-WAN service rule or dropping the traffic.