RedditPP Mascot

RedditPP

r/fortinet • … • u/HappyVlane

Workaround to SD-WAN zone not being selectable in the GUI (7.2.5)

Yesterday a customer contacted me regarding an issue on their 100F cluster running 7.2.5 and I thought I'd share the workaround.

The problem was that after the upgrade the SD-WAN zone had an issue where it was not selectable as an interface in GUI policies. The globe icon also wouldn't display in the SD-WAN Zones tab or in the policies view (you were able to select the zone in SD-WAN rules however). You could still use it in the CLI however, which was my first workaround.

I found out that the last SD-WAN zone in the list has this problem, so I created a dummy zone with no members and then you could use the old/previous SD-WAN zone like normal. Now the problem would jump to the dummy zone.

Note that a reboot of the cluster did not solve this issue. I don't know if other people have/had this problem on other hardware and releases or if it's just this one configuration. I also haven't seen a bug ID in the release notes for this.

— 0