Firewall first find the routing rule in routing table that matches based on the destination address in packet, when performing this match FortiGate evaluate| Network Interview