The administrator uses the FortiManager SD-WAN overlay template to prepare an SD-WAN deployment.

FortiManager SD-WAN Overlay Orchestration produces the core provisioning artifacts IPsec tunnel templates, BGP templates and CLI templates. IPsec tunnels implement the WAN overlays, BGP exchanges route prefixes and the CLI portion provides other device configuration needed by the topology. The candidate key includes a generic Rules template, but the standard generated template list does not identify such an object. SD-WAN rules are configured using the appropriate SD-WAN provisioning template or follow-up policy tasks, and they are not the same as the three generated template types. Static routing templates are not universally generated as core overlays. Reference: FortiManager 7.6 — Objects and Templates Created by SD-WAN Overlay Orchestrator. FortiManager templates reduce repetitive work but must resolve to valid, device-specific configurations at installation time. Device assignments, metadata mappings, ADOM scope, policy-package interfaces and provisioning order should be inspected together rather than troubleshooting any one object in isolation. A successful management connection does not guarantee a successful configuration installation. Review the installation preview and task log, then validate the resulting device configuration and operational diagnostics. This separates a deployment-time validation failure from a live tunnel, routing or SLA fault.