Introduction

FortiSASE is a software-as-a-cloud-delivered service that allows clients to securely access the internet with the protection from FortiOS. With FortiSASE, you can ensure to protect remote off-net endpoints and users with the same security policies as when they are on-net, no matter their location. The service is available through a subscription based on the number of users.

FortiSASE works with various FortiCloud services in the background to deliver a seamless service for securing your internet access.

In terms of security, FortiSASE offers the following features to protect clients:

• Antivirus
• Web Filter
• Intrusion prevention
• File filter
• Data loss prevention
• Application control
• SSL inspection

Security features are customizable and offer many familiar settings as you would see on a FortiGate.

Several flexible steering methods are used to steer or redirect network traffic from the user edge to FortiSASE. These steering methods can be used to securely access Internet, private, and SaaS destinations or applications, respectively, and therefore used to implement FortiSASE Secure Internet Access (SIA), Secure Private Access (SPA), and Secure SaaS Access (SSA) use cases.

Steering Method	Destinations
Agent (FortiClient)	Internet and web-based applications	Private applications via SPA hub	SaaS applications via CASB
IPsec with routing (Thin Edge, Branch On-Ramp)
IPsec with explicit proxy (Private Proxy)
Agentless (Proxy)
FortiSASE use case	Secure Internet Access (SIA)	Secure Private Access (SPA)	Secure SaaS Access (SSA)

For details on these FortiSASE use cases, see the 4-D FortiSASE Architecture Guide.

For details on the deployment process, see FortiSASE Cloud Deployment.

User provisioning is made simple, whether you are creating local users in bulk, integrating users from your Active Directory or LDAP server, or integrating with SAML authentication. You can also easily group your users to apply similar policies.

See Service Organization Controls (SOC2) compliance standard.