Thanks Bro- I always love your labs -straight forward-so clear. Keep educating us my brother

Oh cool. What program did you use to draw the Topology?

This is great. The only improvement I see is to setup the actual outgoing Destination in the Firewall policy rather then just selecting "ALL". This is a best practice so that the SDwan service is only dedicated to that one remote network. If you have two or 3 then maybe selecting ALL makes more sense. Right?

thanks bro

I have a questions. Is there a difference between enabling NAT on the Policy? What does it do?

My eve-ng lab FortiGate vm firewall limit with 3 interface. It says trail vm license support 3 interface. How to use more interface.