From version 7.4.1, when there is ECMP routes, local out traffic may use a different route/port to connect out to the server.Workaround: for critical traffic which is sensitive to source IP address, specify the interface or SD-WAN for the traffic using the interface-select-method command for nearly all local-out traffic. For example:config system fortiguard set interface-select-method specify set interface "wan1"end From 7.4.1, when there is ECMP routes, local out traffic may use different route/port to connect out to server, for critical traffic which is sensitive to source IP address, suggest customer set specify interface or SD-WAN for the traffic since FortiOS has implemented "interface-select-method" command for nearly all local-out traffic.e.g.config system fortiguard set interface-select-method specify set interface "wan1"end