SD-WAN SLAs monitor metrics like packet loss and jitter to evaluate link performance.
SLA measurements can be performed using active probing or passive monitoring.
Administrators can configure all SLA target parameters to define performance criteria.

The global setting enables strict source checking (RPF) on all interfaces by default. The per-interface setting disables the source check on port1, exempting it from strict RPF enforcement.

In DC Agent Mode, the DC agent sends login event data directly to FortiGate without involving a collector agent.

In FortiGate firewall authentication, users are prompted for login credentials only when their initial request matches a policy requiring authentication.
In this configuration, the firewall policy permits HTTP, HTTPS, and ICMP traffic, but DNS service is missing.
Since browsers first need DNS resolution before sending HTTP/HTTPS requests, the user cannot reach the FortiGate for authentication.
Adding DNS to the Service field (Option A) enables the user to resolve hostnames and trigger the firewall authentication prompt.

In the FortiGate SSL-VPN settings, the VPN is configured to listen on port 11443, as shown in the
"Listen on Port" field. However, the VPN client is attempting to connect to https://10.200.1.1:443/, which uses the default HTTPS port (443) instead of the configured port.
To successfully connect, the user must change the SSL VPN port on the client to 11443 so that it matches the listening port defined on the FortiGate device.