SWG mode

In secure web gateway (SWG) mode, users configure FortiSASE as a SWG server on their device at the OS level or in a browser. Once configured, the SWG policies configured in FortiSASE protect sessions initiated in browsers.

This mode requires FortiSASE user-based licensing. See the FortiSASE Ordering Guide.

The provisioning process for SWG mode is as follows:

1. The administrator initializes the FortiSASE environment.
2. The administrator configures policies and security components in FortiSASE as desired, including enabling SWG mode and configuring the desired SWG policies. See Configuring a SWG policy.
3. The administrator configures end users on FortiSASE and distributes the SWG server information to them.
4. End users configure their OS or browser to use the FortiSASE SWG server. When the browser displays an authentication prompt, the end user enters their FortiSASE user credentials.
5. FortiSASE applies the appropriate policies to sessions initiated in the browser.
6. The administrator can view logs in FortiSASE and modify the configuration as desired. See Logging.