SD-WAN Health and Path Selection

Use these commands when SD-WAN traffic uses the wrong member, SLA status is unexpected, or a rule does not match.

Health checks

diagnose sys sdwan health-check
diagnose sys sdwan health-check status

Check latency, jitter, packet loss, and whether the member is alive for the SLA target.

diagnose sys sdwan member
diagnose sys sdwan service

Look for the service ID, selected member, configured strategy, and priority members.

show system sdwan

Confirm zones, members, health checks, SLA targets, and service rules.

Use debug flow for the actual source and destination pair to confirm the selected outgoing interface.

diagnose debug flow filter saddr 10.0.0.10
diagnose debug flow filter daddr 203.0.113.10
diagnose debug flow trace start 50
diagnose debug enable

tags	security, fortigate, debug, sdwan
aliases	FortiGate SD-WAN Debugging, FortiGate SD-WAN Health