NSE7-SSE-AR-26: Fortinet NSE 7 - FortiSASE 26 Architect

By Fortinet · Question Mode

QuestionQ14

VerifiedSD-WAN traffic control and IPsec

An SD-WAN member is no longer required to steer SD-WAN traffic. The administrator updated the SD-WAN configuration and removed the unused member. After this configuration change, users report that some destinations cannot be reached. You verify that the affected flow does not match an SD-WAN rule.

What could cause the traffic interruption?

Explanation

Removing an SD-WAN member can remove static routes associated with that interface. If those routes provided reachability to the affected destinations, traffic that does not match an SD-WAN rule may no longer have a valid route and becomes unreachable. Fortinet documents that SD-WAN zones are used in static routes and that SD-WAN routing relies on configured routes.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!