SD-WAN Overlay

SD-WAN overlay allows FortiGate devices to easily provision new SD-WAN overlay networks from FortiGate Cloud. SD-WAN overlay provides an easy-to-use GUI wizard that simplifies the process of configuring an SD-WAN overlay within a single region.

This feature requires a Standard subscription. See Subscription types.

The SD-WAN overlay hub acts as a bridge to allow overlay shortcuts to be formed between your spokes.

SD-WAN overlay and the spokes rely on Fortinet Technologies Inc.’s Auto-Discovery VPN (ADVPN), which allows the central hub to dynamically inform spokes about a better path for traffic between two spokes. ADVPN shortcut tunnels, also known as shortcuts, are formed between spokes, such as between branches and the data center, or between branches themselves so that traffic does not need to pass through the hub.

An Identity & Access Management user must have full read-write permission in the role-based access control profile to have admin access to SD-WAN overlay features.

Starting May 3, 2025, the FortiCloud IAM portal supports an individual SD-WAN Overlay role control under the FortiGate Cloud permission profile. Therefore, to have read-write or read-only access to the feature, you can configure it accordingly in the IAM portal.