SD-Branch components
What are the main SD-Branch components comprising our solution?
-
On the LAN side, the FortiSwitch (FSW) and the FortiAP (FAP) provide wired and wireless connectivity respectively. Similar to the FortiGates, a wide range of hardware models exists, allowing you to address the requirements of each particular site. Multiple devices can be interconnected in different multi-VLAN and multi-SSID Layer2 topologies, coupled with their managing FortiGate device using a proprietary FortiLink protocol.
In this way, a wide variety of security features are extended into the LAN, including microsegmentation, 802.1X authentication policies, built-in NAC functionality, and more.
-
On the WAN side, the FortiExtender (FEX) supplements the FortiGate WAN connectivity by adding 3G/4G/5G connectivity options. For example, it is often used to provide a backup WAN connection (with the logical FEX interface configured as an SD-WAN Member on the managing FortiGate).