FortiSASE Secure Internet Access (SIA) is one of the main use cases that organisations currently are seeking in order to protect their employees regardless of their location with aim of having a zero trust and consistent security treatment.

In this session, we should see the flexibility of onboarding our remote users either using FortiClient (Agent-Based) or Secure Web Gateway (PAC-Based) to protect their internet traffic with the aim of applying SSL Deep Inspection, enforce In-Line CASB and use posture checks to allow access only for the approved devices.

We will demonstrate FortiSASE’s Secure Private Access (SPA) solution offering remote access utilizing ZTNA or SD-WAN. FortiSASE SPA securely connects users to the private applications while enforcing the least privileged access. In the ZTNA based private access FortiSASE acts as the Policy Engine with FortiClient as the ZTNA agent, and App Gateway as the policy enforcement point. With the recent integration of SD-WAN functionality within FortiSASE, it also offers secure remote access utilizing SD-WAN overlay network.

 During this session, we will cover:

• ZTNA configuration aspects on FortiSASE and App Gateway
• Simple, automatic secure remote access that verifies who and what is on your network and secures application access no matter where users are located
• ZTNA TCP Forwarding use case for RDP and SSH
• Blocking vulnerable devices from accessing corporate network
• FortiSASE Secure Private Access configuration on FortiSASE and glance over the configurations of the Hub and Spoke FortiGate’s in the SD-WAN deployment
• Access private applications in the AWS DC behind the Hub FortiGate using SD-WAN
• Access private applications in the on-prem DC over the ADVPN connection setup utilizing SD-WAN network

Work from anywhere does not mean work from only in one place. With the new norm of hybrid work, remote users are not only roaming, but also work in office. You should consider how to deal with endpoint security and secure the digital assets on your endpoint, as well as secure your network without affected by an unsecured endpoint, when your employees roam out of and in the office.

In this demo, you will see how FortiClient as a unified agent provide endpoint security and zero trust device posture all together.

We will demonstrate how easy to use FortiClient, as an endpoint security agent besides only the traffic forwarder as a SASE agent, to provide vulnerability scanning, removable media control, anti-malware with cloud sandbox integration and anti-ransomware