How to configure SD-WAN on Fortigate

How to configure SD-WAN on Fortigate
===========================
Network Security courses on ElastiCourse/Udemy:
Introduction to Fortigate Firewall
www.elasticourse.com/courses/...
www.udemy.com/course/introduc...
Fortigate Advanced Configuration
www.elasticourse.com/courses/...
www.udemy.com/course/advanced...
Introduction to FortiManager course
www.elasticourse.com/courses/...
www.udemy.com/course/introduc...
===========================
AWS Web Application deployment and migration course
www.elasticourse.com/courses/...
www.udemy.com/course/building...

[@drtripurahpe8412]

Simple explanation, and effective...

[@RK-ly5qj]

VEEERY nice explained. Thx a lot for a hard work ! ;)

[@DailySupport]

kzbin.info/www/bejne/roG4hICOic6spck

[@W4YN0T]

Good vid, but it's a very simple example without any IPsec tunnels and BGP routing. Unfortunately, in most cases, the configuration will be much more complex.

[@glenntembo2693]

Thanks ElastiCourse

[@tendaimusonza9547]

Well explained ,Thank you

[@DailySupport]

kzbin.info/www/bejne/roG4hICOic6spck

[@NSE.channel]

Nice..

[@TheDebasmita7]

does this config act like failover.. port1 will have all the traffic and port will have traffic only if port1 goes down

[@thabosthabos7397]

This is only one Fortigate appliance right just that you used NAT or bridged for port 1 and port 2 because i keep hearing you mention original fortigate what does this mean in this instance can you not do all the configs from your private network ? Is there a reason for that ?

[@ElastiCourse]

There is an upstream Fortigate that don't show in the topology that's where traffic goes to reach internet so think of it as ISP router

[@DailySupport]

kzbin.info/www/bejne/roG4hICOic6spck

[@macster1457]

Do you have a video on how to setup Adguard in Docker? - I know pihole does not block KZbin ads, but can Adguard?

[@ElastiCourse]

I don't believe any DNS blocker can defeat KZbin ads. From long testing it seems KZbin won't ever let you do that, and the only solution is browser extension like ublock origin.

[@macster1457]

@@ElastiCourse oh ok, thank you... I have been searching for a while and can't find a solution to this... is there a way to force users to use Pihole DNS.. meaning, prevent them from using another dns server?

[@ElastiCourse]

Yes you can block DNS to other websites using network firewall if you have, like fortigate or similar, just make sure to enable Pihole IP only to talk to the outside DNS server say cloudflare, and block all other IPs

[@e.mnimeshkamarasinghe397]

Can I have a coupon for your Introduction to Fortigate Firewall in Udemy please ??

[@ElastiCourse]

Here is the best price coupon valid for 5 days! Enjoy and please leave a review when you finish the course www.udemy.com/course/introduction-to-fortigate-firewall/?couponCode=33A20DC175A0F17D166D

[@csmk7825]

Hi Does a firewall protect my web site or network 100% from a DdoS attack And thanks

[@ElastiCourse]

Yes you can check the DDoS video I published for instructions on how to setup the edge protection with strict 8 hour ban timer, you can change the ban to 24 full hours for extra protection kzbin.info/www/bejne/r3jTh5Rsl5WJodU

[@csmk7825]

@@ElastiCourse thanks

[@rachidouqa]

22:00 how did get to the original fortigate

[@ElastiCourse]

The original Fortigate in this case in the upstream gateway/router that connects me to the internet. The idea is to create congestion anywhere in the network path to emulate real life issues with WAN connections or certain network paths based on metrics and SLAs. But this can be replicated using any other network device that support network throttling or QoS if you want to try it yourself.

[@thabosthabos7397]

following