SIA for site-based remote users using FortiExtender

SIA for site-based remote users involves configuring a FortiExtender as a LAN extension by setting up a VXLAN-over-IPsec tunnel between the FortiExtender and FortiSASE. This creates a Layer 2 network between FortiSASE and the network behind the remote FortiExtender. In this SIA use case, because the FortiExtender is responsible for centralizing site connectivity to the FortiSASE FWaaS, the endpoints only need to be configured in their IP settings to forward traffic to the FortiExtender as the default gateway. For details, see FortiExtender as FortiSASE LAN extension.

Therefore, for this SIA use case, individual workstation or device setup is minimized because FortiClient does not need to be installed on endpoints and web browser-based endpoint do not require explicit web proxy settings to be configured.

A typical topology for deploying this example design is as follows: