FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
krajaa
Staff
Staff
Article Id 196677
Description
SD-WAN Health-check packets are not DSCP marked by default and therefore end up in the default group.
Potentially being dropped or dereferenced in favor of prioritized traffic.


Solution
From v6.2.4 & 6.4.0, mark DSCP manually from CLI command.
# Config system virtual-wan-link
    # config health-check

        edit "Name"
            set diffservcode ? (<binary> 6 bits binary, range 000000-111111 )
        next
    end

Contributors