Fortinet white logo
Fortinet white logo

SD-WAN Deployment for MSSPs

Excluding traffic from SD-WAN

Excluding traffic from SD-WAN

Note that even if you configure SD-WAN to act as a default route (as recommended throughout this document), you can still exclude certain traffic from SD-WAN processing. The rule #1 helps you to achieve that.

By default, before selecting a member, SD-WAN rule will check whether the best route to the destination points to any SD-WAN member at all. If it doesn't, this traffic will be considered as "out of SD-WAN scope", and hence it will be handled by the traditional routing.

A good use case is out-of-band management (OOB). As shown on the below diagram, SD-WAN acts as a default route, but there are more specific management prefixes learnt via the OOB network.

This guarantees that all the traffic destined to those prefixes bypasses SD-WAN rule processing and is forwarded to the OOB network.

Excluding traffic from SD-WAN

Excluding traffic from SD-WAN

Note that even if you configure SD-WAN to act as a default route (as recommended throughout this document), you can still exclude certain traffic from SD-WAN processing. The rule #1 helps you to achieve that.

By default, before selecting a member, SD-WAN rule will check whether the best route to the destination points to any SD-WAN member at all. If it doesn't, this traffic will be considered as "out of SD-WAN scope", and hence it will be handled by the traditional routing.

A good use case is out-of-band management (OOB). As shown on the below diagram, SD-WAN acts as a default route, but there are more specific management prefixes learnt via the OOB network.

This guarantees that all the traffic destined to those prefixes bypasses SD-WAN rule processing and is forwarded to the OOB network.