Version:


Table of Contents

23.1.8
Download PDF
Copy Link

What is FortiSASE architecture?

With FortiSASE, remote users (agent-based, agentless, and site-based) form secure connections to the Internet, data center, and cloud by accessing global FortiSASE security points of presence (PoPs), which enforce an organization’s security policies regardless of remote users' locations. Following are examples of common use cases for FortiSASE:

FortiSASE component

Use case

Description

Secure Internet access

Agent-based remote user Internet access

Secure access to the Internet using FortiClient agent

Agentless remote user Internet access

Secure access to the Internet using FortiSASE secure web gateway

Site-based remote user Internet access

Secure access to the Internet using Thin Edge FortiExtender device as FortiSASE LAN extension

Secure private access

Zero trust network access (ZTNA) private access

Access to private company-hosted TCP-based applications behind the FortiGate ZTNA application gateway for various ZTNA use cases. This access method allows for a direct (shortest) path to private resources.

SD-WAN private access

Access to private company-hosted applications behind the FortiGate SD-WAN hub-and-spoke network. This access method extends private access for TCP- and UDP-based applications and offers data center redundancy.

Next generation firewall (NGFW) private access

Access to private company-hosted applications behind the FortiGate NGFW. This use case extends private access for UDP-based applications and agentless remote users.

Secure SaaS access

FortiCASB SaaS access

Access to SaaS applications using FortiCASB Cloud/API

Following is an example architecture of FortiSASE that incorporates all mentioned use cases:

Audience

Midlevel network and security architects in companies of all sizes and verticals should find this guide helpful.

About this guide

The guide is meant to provide high level insight into FortiSASE architectures for different secure access service edge use cases. This guide is meant to be used in conjunction with other technical documentation for each component that the guide lists. Where relevant, the guide lists links to the administrative guides and other technical reference guides. See also More information.

What is FortiSASE architecture?

With FortiSASE, remote users (agent-based, agentless, and site-based) form secure connections to the Internet, data center, and cloud by accessing global FortiSASE security points of presence (PoPs), which enforce an organization’s security policies regardless of remote users' locations. Following are examples of common use cases for FortiSASE:

FortiSASE component

Use case

Description

Secure Internet access

Agent-based remote user Internet access

Secure access to the Internet using FortiClient agent

Agentless remote user Internet access

Secure access to the Internet using FortiSASE secure web gateway

Site-based remote user Internet access

Secure access to the Internet using Thin Edge FortiExtender device as FortiSASE LAN extension

Secure private access

Zero trust network access (ZTNA) private access

Access to private company-hosted TCP-based applications behind the FortiGate ZTNA application gateway for various ZTNA use cases. This access method allows for a direct (shortest) path to private resources.

SD-WAN private access

Access to private company-hosted applications behind the FortiGate SD-WAN hub-and-spoke network. This access method extends private access for TCP- and UDP-based applications and offers data center redundancy.

Next generation firewall (NGFW) private access

Access to private company-hosted applications behind the FortiGate NGFW. This use case extends private access for UDP-based applications and agentless remote users.

Secure SaaS access

FortiCASB SaaS access

Access to SaaS applications using FortiCASB Cloud/API

Following is an example architecture of FortiSASE that incorporates all mentioned use cases:

Audience

Midlevel network and security architects in companies of all sizes and verticals should find this guide helpful.

About this guide

The guide is meant to provide high level insight into FortiSASE architectures for different secure access service edge use cases. This guide is meant to be used in conjunction with other technical documentation for each component that the guide lists. Where relevant, the guide lists links to the administrative guides and other technical reference guides. See also More information.