When all SD-WAN members on a given interface are detected as "dead" (failed health checks), FortiGate will bring down the corresponding physical interface (e.g., port5) to prevent further traffic from being sent over a non-functional path. This helps to ensure that no traffic is black-holed and allows for proper failover.
[References:, [FCSS_SDW_AR-7.4 1-0.docx Q5], FortiOS 7.4 SD-WAN Health Check and Interface Behavior, ]
Submit