A network administrator is using FortiManager to manage 30 FortiGate devices. They have created a new SD-WAN template that references a performance SLA health check. After applying the template to all devices, the administrator notices that some devices show the health check as 'down' and traffic is not being routed correctly. The health check is configured to ping 8.8.8.8. What is the most likely cause of this issue?
A company uses FortiManager to manage a large SD-WAN deployment. They have created a metadata variable named 'Region' with values 'EMEA', 'APAC', and 'AMER'. They want to assign different SD-WAN templates based on the region of each FortiGate. Which FortiManager feature should they use to dynamically assign the correct SD-WAN template to each device?
A network administrator manages 80 FortiGates in a hub-and-spoke SD-WAN topology using FortiManager 7.2. The administrator wants to push a new SD-WAN rule to all branch FortiGates that routes traffic from the 'VoIP' internet service to the MPLS overlay when the MPLS Performance SLA is within SLA, otherwise to the broadband overlay. The administrator creates an SD-WAN template with the rule and assigns it to a new policy package. After installation, the administrator notices the rule is missing from the branch FortiGates. What is the most likely cause?
An administrator is using FortiManager to manage SD-WAN configurations. They need to ensure that SD-WAN templates are correctly applied and that the configuration is synchronized. Which two statements about SD-WAN template installation in FortiManager are true? (Choose two.)
A network administrator is using FortiManager to manage 30 FortiGates for a retail chain. The company wants to ensure that each store's SD-WAN configuration follows a standard template, but also needs to allow local customization of the WAN interface IP addresses at each site. Which FortiManager feature should be used to achieve this?
An administrator is configuring an SD-WAN template in FortiManager for a hub-and-spoke topology. The template includes multiple Performance SLAs that monitor different health checks. The administrator wants to ensure that the SD-WAN rules can dynamically select the best path based on the SLA results. Which two actions must be performed to achieve this? (Choose two.)
An administrator is using FortiManager 7.4 to manage a large SD-WAN deployment. They need to ensure that when a new SD-WAN template version is installed, the FortiGates automatically update their SD-WAN rules without requiring a full policy package reinstall. The administrator wants to use the 'Install Wizard' to push only the SD-WAN template changes. Which statement describes the correct behavior of the FortiManager Install Wizard when installing an SD-WAN template?
An administrator is using FortiManager to manage SD-WAN templates. They need to ensure that the SD-WAN configuration is consistent across all managed FortiGates. Which two actions can be performed to verify that the SD-WAN template is correctly applied to a FortiGate? (Choose two.)
A network administrator at a company with 30 branch offices uses FortiManager to manage all FortiGates. They need to ensure that the SD-WAN configuration on all branches is consistent and can be updated centrally. They decide to use SD-WAN templates. After creating a template, they want to assign it to all managed FortiGates that belong to the 'Branch' group. Which FortiManager feature allows them to assign the SD-WAN template to multiple FortiGates at once?
A network administrator is using FortiManager to manage a set of FortiGates with SD-WAN configured. They want to apply a consistent SD-WAN template to all devices. Which FortiManager feature allows them to apply the template to multiple devices at once?
A network engineer is configuring an SD-WAN template in FortiManager to be used across multiple FortiGates. The template includes a Performance SLA named 'Internet_SLA' that monitors two members: 'wan1' and 'wan2'. The engineer wants the SLA to consider the link as within SLA only if both members meet the configured latency threshold. Which configuration in the SD-WAN template achieves this requirement?
A network engineer is using FortiManager to manage an SD-WAN deployment. After applying an SD-WAN template to a managed FortiGate, the engineer notices that the SD-WAN member interfaces are not correctly mapped to the physical interfaces on the device. The device model is FG-100F, but the template was originally created for FG-60F. Which FortiManager feature should the engineer use to resolve this interface mapping issue?
A network administrator at a managed service provider needs to deploy an SD-WAN configuration to 40 FortiGate devices using FortiManager. The administrator wants to ensure that interface names and IP addresses are automatically substituted per device without manual editing. Which FortiManager SD-WAN template feature should the administrator configure?
A network administrator is using FortiManager to manage a large SD-WAN deployment. They need to provision a new SD-WAN member interface on multiple FortiGate devices that are already managed by FortiManager. The interface name varies across different FortiGate models (e.g., 'wan1', 'port1'). Which FortiManager feature should the administrator use to ensure the SD-WAN template can be applied to devices with different interface naming conventions?
An administrator has an SD-WAN template applied to a FortiGate. The template includes a health check that monitors two WAN links. The administrator notices that the health check is not working as expected and wants to troubleshoot. Which FortiManager tool should the administrator use to view the health check status and logs for the FortiGate?
An administrator is creating an SD-WAN template in FortiManager for a new branch office. The branch has two WAN links: one primary and one backup. They want to configure an SD-WAN rule that directs all internet traffic through the primary link and uses the backup link only when the primary link fails. Which SD-WAN rule configuration should they use?
A network administrator is using FortiManager to manage a large SD-WAN deployment. They need to provision a new SD-WAN member interface on a managed FortiGate without manually assigning the physical port. The FortiGate has multiple unused interfaces. Which FortiManager SD-WAN template feature allows the administrator to define a logical interface that will be dynamically mapped to an available physical interface during installation?
A network administrator is configuring SD-WAN in FortiManager and needs to define a Performance SLA health check that monitors both latency and jitter. The health check must use a protocol that supports these metrics. Which two protocols can be used in the Performance SLA health check to measure latency and jitter? (Choose two.)
An administrator is using FortiManager to manage SD-WAN templates for multiple FortiGates. The administrator needs to ensure that when a template is updated, only the changes are pushed to the managed devices, minimizing disruption. Which FortiManager feature should be used to achieve this?
An administrator is using FortiManager to manage SD-WAN templates across multiple FortiGates. The administrator needs to ensure that a specific SD-WAN rule is applied only to devices in a particular region. Which two actions are required to accomplish this? (Choose two.)
An administrator is configuring an SD-WAN template in FortiManager. They need to ensure that the SD-WAN rules can select the best path based on real-time performance metrics. Which TWO health check protocols can be used to measure latency and jitter for SD-WAN rules? (Choose two.)
A network administrator is creating an SD-WAN template in FortiManager. The template will be used to configure SD-WAN on multiple FortiGates. Which type of object must be defined in the template to specify the performance criteria for selecting an outgoing interface?
A network engineer is using FortiManager to manage an SD-WAN deployment across 50 sites. They have created an SD-WAN template and assigned it to all sites. The template includes a health check that monitors a public server. The engineer wants to ensure that if the public server becomes unreachable, the health check does not falsely mark the link as down. Which health check parameter should they adjust?
A network engineer is using FortiManager to manage SD-WAN templates for multiple FortiGates. The engineer wants to ensure that when a new SD-WAN member interface is added to a template, the change is automatically pushed to all devices using that template without manual intervention. Which FortiManager feature should the engineer configure to achieve this?
An administrator is using FortiManager to manage SD-WAN templates across multiple FortiGates. The administrator needs to ensure that the SD-WAN configuration remains consistent and that changes can be rolled back if necessary. Which two FortiManager features support these requirements? (Choose two.)
A network engineer is troubleshooting an SD-WAN deployment managed by FortiManager. The engineer notices that one of the SD-WAN health checks is failing on a specific FortiGate, but the health check template shows as 'In Sync' in FortiManager. Which action should the engineer take to verify the actual health check status on the FortiGate?
A network administrator is using FortiManager to manage SD-WAN templates across multiple FortiGates. The administrator needs to ensure that the SD-WAN templates can be applied to devices with different interface names and that the configuration remains consistent. Which two actions must the administrator perform to achieve this? (Choose two.)
A network administrator manages 30 FortiGate devices through FortiManager. The administrator needs to deploy an SD-WAN template to all devices, but each device has a different WAN interface name (wan1, wan2, port1, port2). The administrator wants to avoid creating separate templates for each device. Which FortiManager feature should the administrator use when applying the SD-WAN template?
A network engineer is designing an SD-WAN template in FortiManager for a hub-and-spoke topology. The engineer needs to define health checks that will be used by SD-WAN rules. Which two protocols can be used for SD-WAN health checks in FortiManager? (Choose two.)
A network administrator manages 45 branch FortiGates with FortiManager using SD-WAN templates. Headquarters requires that all branches use the same SD-WAN rule to steer Microsoft 365 traffic over the lowest-latency member. The administrator wants to guarantee that the rule cannot be locally overridden on any branch FortiGate, and that any local change is reverted automatically. Which FortiManager configuration should the administrator use?
A network administrator is designing an SD-WAN deployment in FortiManager for 120 FortiGates spread across three ADOMs. Each ADOM has different WAN interfaces and different performance SLA thresholds, but all FortiGates must share the same SD-WAN rule structure for SaaS steering. The administrator wants to minimize manual per-device configuration and reuse the layout across ADOMs. Which two FortiManager capabilities should the administrator use to meet these requirements? (Choose two.)
A network administrator uses FortiManager with an SD-WAN template to manage two data center FortiGates in an HA pair. After the administrator changes a performance SLA's probe interval in the template and installs the policy package, the secondary FortiGate reports the old probe interval while the primary reports the new value. The administrator confirms both devices are managed and in sync. What is the most likely cause?
You are troubleshooting a scenario where an SD-WAN template is not pushing to a FortiGate. Which log file on the FortiManager is most useful to identify the specific CLI command causing the failure?
You are configuring SD-WAN templates in FortiManager. What is the primary purpose of using SD-WAN Central Management instead of configuring SD-WAN directly on individual FortiGates?
A network administrator is using FortiManager to manage SD-WAN configurations for multiple FortiGates. The administrator wants to define a health check that will be used across several SD-WAN templates and needs to ensure that any changes to this health check are automatically propagated to all templates that reference it. Which FortiManager object should the administrator create?
An administrator has an SD-WAN template in FortiManager that is assigned to a managed FortiGate. The FortiGate is currently offline. The administrator modifies the template and installs the configuration. What happens to the FortiGate when it comes back online?
A company uses FortiManager to manage 200 FortiGates with SD-WAN enabled. The administrator needs to update the SD-WAN health check settings for all branches to use a new server IP. The health check is referenced by a single SD-WAN template that is assigned to all branches. After modifying the health check object in FortiManager, what must the administrator do to apply the changes to all FortiGates?
An administrator is configuring an SD-WAN template in FortiManager for a new branch deployment. The template will include multiple SD-WAN members and a performance SLA that monitors the health of these members. Which two statements about the relationship between SD-WAN templates and health check objects are true? (Choose two.)
A network engineer is using FortiManager to manage SD-WAN templates for multiple FortiGates. They need to ensure that a specific SD-WAN rule is only applied to branch offices that have a specific tag. Which FortiManager feature should they use?
A network engineer is creating a new SD-WAN template in FortiManager. The template will be used to configure SD-WAN on several FortiGate devices. The engineer wants to define a health check that monitors the latency to a specific server using ICMP. Which configuration object should the engineer create first?
An administrator is troubleshooting an SD-WAN template deployment in FortiManager. The template fails to install on a managed FortiGate. Which two actions should the administrator take to identify the cause? (Choose two.)
A network administrator is using FortiManager to manage a large SD-WAN deployment. They need to create a new SD-WAN template that will be applied to multiple FortiGates. The administrator wants to ensure that the template can be easily modified in the future without having to manually update each device. Which FortiManager object should they use to define the SD-WAN template?
A company has an SD-WAN template in FortiManager that is assigned to 50 FortiGates. The template includes a health check object named 'HC1' that monitors a server at 10.0.0.1. The administrator modifies 'HC1' to monitor 10.0.0.2 instead. After the change, the administrator notices that some FortiGates still show the old server IP in their running configuration. What is the most likely reason for this discrepancy?
An administrator is configuring an SD-WAN template in FortiManager. They want to ensure that the template can be applied to FortiGates with different interface names. Which feature in FortiManager allows mapping template interface references to actual device interfaces?
A network engineer is configuring an SD-WAN template in FortiManager. They want to define a performance SLA that monitors the quality of two WAN links using HTTP probes to a specific server. Which FortiManager object should they configure to define the HTTP probe parameters?
A network administrator at a large enterprise uses FortiManager to manage 120 FortiGates. The security team wants to enforce a consistent SD-WAN configuration across all branches, but the branches have different WAN link counts and interface names. The administrator wants to avoid manually editing each device's configuration. Which FortiManager feature should the administrator use to create a reusable SD-WAN configuration that can adapt to each device's interface names?
An administrator has configured an SD-WAN template in FortiManager and applied it to a FortiGate. Later, the administrator modifies the template by adding a new SD-WAN zone and a new performance SLA. What happens when the administrator installs the modified template to the FortiGate?
An administrator is reviewing the SD-WAN configuration in FortiManager after applying a template to several FortiGates. They notice that one FortiGate has a different SD-WAN rule order than the others. What is the most likely reason for this discrepancy?
An administrator has an SD-WAN template applied to 30 FortiGates via FortiManager. The template includes a performance SLA named 'Critical_SLA' that monitors two WAN links. The administrator needs to change the SLA's probe interval from 500ms to 1000ms without affecting other settings. After modifying the template, what must the administrator do to propagate the change to all managed FortiGates?
An administrator is configuring an SD-WAN template in FortiManager for a hub-and-spoke topology. The administrator wants to ensure that the SD-WAN rules can dynamically select the best path based on performance. Which two components must be configured within the SD-WAN template to achieve this? (Choose two.)
A network administrator is troubleshooting an SD-WAN deployment managed by FortiManager. They notice that a specific SD-WAN rule is not being enforced on a FortiGate, even though the template was installed successfully. The rule uses a performance SLA to select the best path. What is the most likely cause?
A network engineer is configuring an SD-WAN template in FortiManager for a new branch office. The branch has two internet links: one via DHCP and one via static IP. The engineer wants to ensure that the SD-WAN rule prefers the static link for business-critical traffic but can fail over to the DHCP link if the static link's performance degrades. Which SD-WAN template component should the engineer configure to define the performance thresholds that trigger failover?
A network administrator manages 30 FortiGate devices in FortiManager. The administrator wants to ensure that all devices use the same SD-WAN health check settings for a specific SLA target. Which FortiManager object should the administrator configure to achieve this?
A network administrator manages 80 FortiGate devices in FortiManager. The company wants to ensure that all devices use the same SD-WAN health check settings for a critical business application, but each device has a different WAN IP address. Which FortiManager feature should the administrator use to meet this requirement?
A company uses FortiManager to manage 100 FortiGates. They have an SD-WAN template applied to all devices. The administrator modifies a health check within the template to change the probe interval from 500ms to 1000ms. After saving the template, they want to push the change to all managed FortiGates. What must the administrator do to ensure the updated health check is applied to all devices?
An administrator has created an SD-WAN template in FortiManager and applied it to a group of FortiGates. Later, they need to modify the template to add a new health check. What is the most efficient way to update all managed devices with this change?
An administrator has configured an SD-WAN template in FortiManager and applied it to a FortiGate. Later, the administrator needs to add a new VLAN interface as an SD-WAN member. Where should this change be made to ensure it is reflected in the FortiManager-managed configuration?
A company uses FortiManager to manage SD-WAN configurations for 50 branch offices. The administrator needs to update the SD-WAN rules across all branches to include a new application category for SaaS traffic. The update must be applied consistently and with minimal administrative effort. Which two actions should the administrator take to achieve this? (Choose two.)
An administrator is using FortiManager 7.2 to manage SD-WAN templates across 150 FortiGates. They need to ensure that when a template is updated, the changes are propagated efficiently and that the FortiGates maintain high availability. The administrator wants to use the 'Install Wizard' to push the updated template. Which two statements are true about installing an SD-WAN template with the Install Wizard in this scenario? (Choose two.)
A network administrator is configuring an SD-WAN template in FortiManager. The template includes multiple SD-WAN rules that reference different Performance SLAs. The administrator wants to ensure that if a link fails an SLA, traffic is automatically routed to another link that meets the SLA. Which SD-WAN rule strategy should be used to achieve this?
A network administrator is managing an SD-WAN deployment with multiple FortiGates using FortiManager. The administrator needs to ensure that all SD-WAN health checks are consistent across all devices and that any changes to the health check parameters are automatically propagated. Which FortiManager object should the administrator use to achieve this?
A network administrator is using FortiManager to manage an SD-WAN deployment. They want to create a new SD-WAN template that includes a health check for the 'MPLS' interface. Where in the FortiManager GUI should the administrator navigate to create this template?
An administrator is using FortiManager to manage an SD-WAN deployment with 80 FortiGates. The SD-WAN template includes a health check that pings the destination '8.8.8.8' every 500ms. The administrator notices that some branches have high latency to that destination, causing unnecessary failovers. The administrator wants to change the health check destination to a regional server with lower latency for each branch. However, the branches are in different geographic regions. What is the most efficient way to customize the health check destination per region without creating multiple templates?
An administrator is configuring an SD-WAN template in FortiManager. The template includes a performance SLA that monitors two health checks: one for latency and one for packet loss. Which FortiManager object must be referenced in the SD-WAN template to define these health checks?
A network engineer is using FortiManager to manage a FortiGate that already has a local SD-WAN configuration. The engineer wants to transition to centralized management by assigning an SD-WAN template to the device. After the template is assigned and installed, what is the effect on the existing local SD-WAN settings?
A network engineer is creating an SD-WAN template in FortiManager. They want to define a health check that monitors the quality of an internet link by sending HTTP requests to a specific URL. Which configuration element in the SD-WAN template should they use to accomplish this?
A network administrator is managing a FortiManager that has provisioned an SD-WAN template to a group of managed FortiGates. The administrator needs to verify that each FortiGate is actually running the intended SD-WAN configuration and that no device is out of sync. Which FortiManager workflow should the administrator use to compare the intended SD-WAN template configuration against the running configuration on each managed device?
An administrator is configuring an SD-WAN template in FortiManager. The template includes a performance SLA that monitors two health checks: one for latency and one for jitter. The administrator wants the SD-WAN rule to select the member with the lowest latency. Which FortiManager configuration element must be used to achieve this?
An administrator is using FortiManager to manage SD-WAN configurations for multiple FortiGates. They need to update the SD-WAN template to change the health check target for all devices. After modifying the template, they want to ensure the changes are pushed to all managed FortiGates efficiently. Which action should they take in FortiManager?
An administrator is using FortiManager to deploy an SD-WAN configuration to a new FortiGate. The administrator wants to ensure that the SD-WAN member interfaces are correctly associated with the physical interfaces on the device. Which FortiManager feature allows the administrator to define the mapping between logical SD-WAN interfaces and physical interfaces?
A network engineer is configuring an SD-WAN template in FortiManager for a group of branch FortiGates. The engineer needs to define health checks that monitor the performance of WAN links. Which two health check protocols are supported in FortiManager SD-WAN templates? (Choose two.)
An administrator is creating an SD-WAN template in FortiManager and needs to define the member interfaces. Which FortiManager object is used to group these interfaces for the SD-WAN configuration?
An administrator needs to deploy an SD-WAN template to a FortiGate that has two WAN interfaces: wan1 and wan2. The template includes an SD-WAN rule that load-balances traffic across both interfaces. During installation, the administrator receives an error that the interface mapping is incomplete. What is the most likely cause?
A network administrator is using FortiManager to manage SD-WAN templates for multiple FortiGates. They need to ensure that a specific health check, which monitors a critical cloud application, is used by all SD-WAN rules across all templates. What is the most efficient way to achieve this in FortiManager?
An administrator is creating an SD-WAN template in FortiManager to be applied to multiple FortiGate devices. The administrator wants to ensure that the template can be reused across devices with different WAN interface names. Which configuration element in the SD-WAN template allows the use of variables for interface names?
An administrator is configuring an SD-WAN template in FortiManager. The template will be used to deploy SD-WAN to multiple branch FortiGates. Which two statements about SD-WAN templates in FortiManager are true? (Choose two.)
A network administrator is troubleshooting an SD-WAN deployment managed by FortiManager. The administrator notices that after installing an SD-WAN template, some FortiGates are not using the expected health check server. The administrator verifies that the template is correctly configured with the health check server IP. What is the most likely cause for the discrepancy?
An administrator is creating an SD-WAN template in FortiManager. The template will be used to provision multiple FortiGates. The administrator wants to define a health check that uses ICMP probes to monitor the primary WAN link. Which FortiManager object must be configured within the SD-WAN template to achieve this?
An administrator is configuring an SD-WAN template in FortiManager. The template includes multiple health checks that monitor the performance of different WAN links. The administrator wants to ensure that if a health check fails, the SD-WAN rule automatically redirects traffic to another member. Which component of the SD-WAN template is responsible for defining the action taken when a health check fails?
An administrator is using FortiManager to manage an SD-WAN deployment. The administrator needs to add a new SD-WAN member to an existing template that is already assigned to 20 FortiGates. After modifying the template, what must the administrator do to apply the change to all managed devices?
A network administrator is using FortiManager to manage a large SD-WAN deployment. The administrator needs to create a new SD-WAN template that will be used by several FortiGates. The template must include a health check that uses HTTP to monitor a specific server. Which FortiManager object type should the administrator configure first to define the HTTP health check before adding it to the SD-WAN template?
An administrator has an SD-WAN template in FortiManager that is already assigned to a managed FortiGate. The administrator edits the template to change the SD-WAN zone membership of an interface from 'virtual-wan-link' to a custom zone named 'overlay'. After saving the template, what must the administrator do to push this change to the FortiGate?
A network administrator is using FortiManager to manage SD-WAN configurations for multiple FortiGates. The administrator wants to ensure that all devices use the same health check server IP address for their SD-WAN performance SLAs. Where in FortiManager should the administrator define this shared health check server?
An administrator has created an SD-WAN template in FortiManager and applied it to a FortiGate. The administrator then modifies the template to add a new SD-WAN rule that directs traffic from a specific subnet to a new overlay interface. After installing the policy package, the administrator notices that the rule is not taking effect on the FortiGate. What is the most likely reason?
An administrator has just created an SD-WAN template in FortiManager and assigned it to a policy package for 30 branch FortiGates. Before installing, the administrator wants to verify how the SD-WAN members, zones, and performance SLA settings will look on a specific FortiGate without affecting the production configuration. Which FortiManager feature should the administrator use?