Simple definition
A FortiGate Policy Route is a traffic-based routing rule that can force a path different from the one selected by normal destination-based routing.
Technical definition
A policy route can match traffic using criteria such as the incoming interface, source and destination addresses, or selected protocol parameters, then specify an outgoing interface and/or gateway. Its exact interaction with the routing table, SD-WAN, and other FortiOS mechanisms depends on the configuration.
How it works / role
Its role is to implement policy-based routing: select a path according to traffic characteristics rather than relying only on the destination and best available route.
What is it used for?
Send a VLAN, application, or traffic class through a specific WAN link, force a particular next hop, or handle an exceptional routing requirement.
Practical example
Traffic from the VoIP VLAN is sent through WAN2 while other users follow the normal default path. The policy route applies only to flows that match its configured criteria.
Common issues
- Match criteria are too broad and redirect unintended traffic
- Configured gateway or outgoing interface is unreachable
- Routing becomes asymmetric through a stateful firewall
- Interaction with static routes or SD-WAN is misunderstood
Related terms
Key takeaway: Use policy routing only for a documented requirement and make its interaction with normal routing explicit.