SD-WAN interacts with many other FortiGate features. Some of them are required to allow SD-WAN to steer the traffic. Which three configuration…

For FortiOS SD-WAN to function and steer traffic, three fundamental components are mandatory. First, Interfaces must be configured and assigned to the SD-WAN zone as members to provide the physical or logical egress paths. Second, Routing must be established, typically via a default static route pointing to the SD-WAN virtual interface, ensuring the FortiGate's routing table directs outbound traffic to the SD-WAN engine. Third, Firewall policies must be created to permit traffic from the internal ingress network to the SD-WAN interface. Without these three elements, traffic will either not reach the SD-WAN engine, lack a valid egress path, or be dropped by the firewall's default deny policy.

B: Security profiles are optional Unified Threat Management (UTM) features applied to firewall policies for inspection; they are not required for basic SD-WAN traffic steering.

E: Traffic shaping is an optional Quality of Service (QoS) feature used to control bandwidth allocation, not a mandatory requirement for SD-WAN rules to function.

1. Fortinet FortiOS 7.2 Administration Guide. Section: SD-WAN > SD-WAN configuration > Basic SD-WAN configuration.

2. Fortinet NSE 7 SD-WAN 7.2 Courseware. Module: SD-WAN Configuration and Routing.