Configuring branch to vWAN rules

In this section we are going to edit the SD-WAN template to create a new performance SLA target as well as new SD-WAN rules.

To configure branch to vWAN rules:

1. In FortiManager, go to Provisioning Templates > SD-WAN Templates.
2. Double-click the SDwan-Branch template to open it for editing.
3. Create a rule for traffic from branch devices to Azure VNET:
   1. Under SD-WAN Rules, click Create New. The Create New SD-WAN Rule pane opens.
   2. Set the following options, and click OK:

      Name	Azure_Traffic
      Source	Branch Subnet (Create a new Address Object.)
      Destination	Azure VNET subnet (Create a new Address Object.)

      You can create a new firewall address by clicking the + icon on the Address field.

      

      The required firewall addresses are selected.

      

   3. On the Lowest Cost (SLA) tab, set the following options, and click OK.

      

      The SD-WAN rule is created.

4. Click OK to save the SD-WAN template.