You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use…

When an administrator attempts to delete an SD-WAN member directly from the FortiGate GUI while it is still assigned to an SD-WAN zone, the action will fail. FortiGate's configuration management prevents the deletion of objects that have dependencies. In this case, the SD-WAN member is an object in use by the SD-WAN zone configuration. Therefore, FortiGate will display an error message indicating the object is in use. While it is possible to first remove the member from the zone in the GUI and then delete it, the direct deletion fails, and the CLI offers a powerful and alternative method for managing such configuration changes.

A. FodiGate accepts the deletion and removes routes as required.

This is incorrect. FortiGate will block the deletion because the SD-WAN member is still part of a zone, which constitutes a configuration dependency.

C. FortiGate displays an error message. SD-WAN zones must contain at least two members.

This is incorrect. While plausible for redundancy, there is no explicit rule in the official documentation stating that an SD-WAN zone must always contain a minimum of two members. The error is due to the dependency, not a minimum member count rule.

D. FortiGate accepts the deletion and places the member in the default SD-WAN zone.

This is incorrect. The deletion action is blocked and fails. FortiGate does not move objects to a default location upon a failed deletion attempt.

1. FortiOS 7.4.0 Administration Guide - SD-WAN > Deleting an SD-WAN member:

The guide states

"An SD-WAN member cannot be deleted if it is being used in an SD-WAN rule

a performance SLA

or a static route. You must remove the SD-WAN member from all configurations before deleting it." Being a member of an SD-WAN zone is considered being "used in a configuration

" which creates a dependency and prevents direct deletion

thus generating an error.

2. FortiOS 7.4.0 CLI Reference - system sdwan:

The CLI reference documents the commands under config system sdwan to manage members and zones. Specifically

config zone

edit

and unselect member can be used to remove the dependency

and config member

delete can be used to delete the member. This confirms the CLI is a valid and robust tool for this operation.