Configure two WAN for WIFI zone

Your Firewall Rule allows traffic to the interface itself.

IF you want to allow traffic to WAN, remove the #Port object and use ANY. SFOS will take care to match it for all WAN Interfaces. 

The #Port Interface is the IP of the interface itself and does not include all traffic going out to this interface. 

And if you want to route the traffic only over the second WAN Interface, you have to create a SD-WAN Route for this. Simply configure the WAN2 as Backup in WAN link manager (so no other traffic will use it) and create a SD-WAN Route for your Wireless LAN as Source and Destination Internetv4 - Then use the WAN2. 

Hi Toni,

i just created NEW SDWAN route & cannot get any traffic result blocked

incomfing interface NEW SSID ( 192.168.25.3) 

source network WIFI  subnet 192.168.25.0/27

Destination port5  192.168.101.2 

WAN LINK manager type changed to backup

Note: did not remove any of the above config & kept firewall rule

Do not use #Port5 in anything. It will not work. It is the wrong approach. 

Replace Port5 in the firewall rule with ANY.

Replace Port5 in the SD-WAN Rule with ANY. 

SD-WAN config + firewall rule worked, trafiic route on dedicated port
Thank you 

SD-WAN config + firewall rule worked, trafiic route on dedicated port
Thank you 

You can also replace ANY with "Internetv4" to be more specific.