Verification

Now that the HUBs and Branches are fully configured, you can review your SD-WAN traffic from FortiManager. For best results, generate some traffic from devices behind a branch FortiGate which matches an SD-WAN rule. For example, you can ping a resource in your HUB to utilize the Corporate_Traffic rule.

To review your SD-WAN traffic:

1. On the FortiManager, navigate to FortiView > SD-WAN. This pane contains various widgets to help visualize your SD-WAN traffic.
2. Review the SD-WAN Rules Utilization widget.
   1. Note which rules are being leveraged.
   2. Note which traffic is matching each utilized rule.
      

      In this example, we can see the Internet_Traffic is matching HTTPS traffic and is using port2, or WAN2. We can also see that Corporate_Traffic is matching PING traffic and is leveraging the HUB1-VPN1 interface.

      You can use the SD-WAN Utilization by Application widget to learn not only how much traffic is being generated for each application, but also quickly identify which interface the traffic is being sent over. In this example, we can see the same information as the previous chart but it is displayed in a way that makes it easy to identify the amount of data for each traffic type, as well as which port it is being sent over.
      

      Lastly, use the top navigation bar to select SD-WAN Summary.

      This view gives you an overview of your entire SD-WAN deployment, rather than individual branches. Note the Top SD-WAN SLA Issues. You can adjust this to show Latency and enter HUB in the search field to review each branch’s VPN connection.