Underlay links are data links rented or bought from an ISP. These links consist of Internet, MPLS, and 3G/LTE links.
Overlay links are virtual tunnels built on top of underlay links. These links form an IPsec secured connection between two FortiGate devices.
You specify underlay and overlay links when you configure profiles.