Diego Marcusso – Sr.
Systems Engineer
Rafael Claudio – Systems Engineer
Apoio:
Created by:
Diego Marcusso
Rafael Claudio
Agenda
• Introdução sobre SASE
• Evolução de SD-WAN, ZTNA e SASE
• Arquitetura
• Principais funcionalidades
• Explicação de Casos de Uso
• Criação de BoM
• Kahoot
• Laboratório prático
© Fortinet Inc. All Rights Reserved. 2
SASE Market
SASE Trends
By 2025, 50% of new SD-WAN purchases will be
part of a single-vendor SASE offering, up from 10%
in 2022.
By 2025, one-third of new SASE deployments will
be based on a single-vendor SASE offering, up
from 10% in 2022.
Source
[Link]
© Fortinet Inc. All Rights Reserved. 4
Gartner Magic Quadrant
Feb. 2023 Magic Quadrant™ for Security Nov. 2022 Magic Quadrant™ for Network Sep. 2022 Magic Quadrant™ for SD-WAN
Service Edge Firewalls
© Fortinet Inc. All Rights Reserved. 5
Gartner Recognizes Fortinet as Single-Vendor SASE
FortiSASE
Gartner - 10 April 2023
Magic Quadrant for Security Service Edge
Honorable Mentions
Fortinet: Fortinet provides a cloud-delivered SWG, CASB and ZTNA via ForitSASE and a universal ZTNA offering based on its next-generation
firewall (NGFW) acting as an in-line proxy. Fortinet has a large globally diverse client base. We excluded Fortinet because
as of 1 September 2022, it did not meet Gartner’s required minimum points of presence globally for direct customers of FortiSASE.
© Fortinet Inc. All Rights Reserved. 6
Why? How?
SASE
Too Many Security Acronysm
NGFWaaS SD-WAN SWG SASE CASB WAF CSPM C&C
DevSecOps
DLP IPS IAM 2FA VPN
ZTNA DAST SAST DDoS
XDR NDR Cloud FW IR&R SSL
Web CloudSec DNSSec Sandbox
Filter Decryption
© Fortinet Inc. All Rights Reserved. 8
In the Beginning
Branch
Applications
Users
On Network MPLS
FortiGuard
DLP
Web
IPS Filtering
SSL
Decryption Anti-
Virtus
Advanced User
Threat Security
Protection
Internet
© Fortinet Inc. All Rights Reserved. 9
Dual-MPLS
Branch
MPLS
Applications
Users
On Network MPLS
FortiGuard
DLP
Web
IPS Filtering
SSL
Decryption Anti-
Virtus
Advanced User
Threat Security
Protection
Internet
© Fortinet Inc. All Rights Reserved. 10
SD-WAN – Internet as WAN
Secure SD-WAN:
• Intelligent Routing
• Zero Touch Provisining
• QoE
• Application Resilience
• Cloud On Ramp
• Integrated Advanced Security
Branch
MPLS
Internet-VPN Applications
Users
On Network
FortiGuard
DLP
Web
IPS Filtering
SSL
Decryption Anti-
Virtus
Advanced User
Threat Security
Protection
Internet
© Fortinet Inc. All Rights Reserved. 11
Extending security to remote branches
Secure SD-WAN:
• Intelligent Routing
• Zero Touch Provisining
• QoE
• Application Resilience
• Cloud On Ramp
• Integrated Advanced Security
Branch
MPLS
Internet-VPN Applications
Users
On Network
FortiGuard
DLP
Web
IPS DLP
IPS Filtering
SSL
Decryption SSL
Decryption Anti-
Virtus
Advanced User
Threat
Anti- Security
Web Protection
Virtus
Filtering
FortiGuard User
Advanced
Security
Threat
Protection
Internet
© Fortinet Inc. All Rights Reserved. 12
SaaS Application – Direct Internet Access
Secure SD-WAN:
• Intelligent Routing
• Zero Touch Provisining
• QoE
• Application Resilience
• Cloud On Ramp
• Integrated Advanced Security
Branch
MPLS
Internet-VPN Applications
Users
On Network
FortiGuard
DLP
DIA Web
IPS DLP
IPS Filtering
SSL
Decryption SSL
Decryption Anti-
Virtus
Advanced User
Threat
Anti- Security
Web Protection
Virtus
Filtering
FortiGuard User
Advanced
Security
Threat
Protection
Internet SaaS
© Fortinet Inc. All Rights Reserved. 13
Multi-Cloud Adoption
Apps Apps Apps
Branch
MPLS
Internet-VPN Applications
Users
On Network
FortiGuard
DLP
DIA Web
IPS DLP
IPS Filtering
SSL
Decryption SSL
Decryption Anti-
Virtus
Advanced User
Threat
Anti- Security
Web Protection
Virtus
Filtering
FortiGuard User
Advanced
Security
Threat
Protection
Internet SaaS
© Fortinet Inc. All Rights Reserved. 14
Zero-Trust Network Access
Apps Apps Apps
HTTP/HTTPS application only
Users
Agentless
Cloud-Based or on-premises applications
Users
Client-Based
Data Center
Branch
Applications
Users
On Network
FortiGuard
DIA DLP
Web
IPS DLP
IPS Filtering
SSL
Decryption SSL
Decryption Anti-
Virtus
Advanced User
Threat
Anti- Security
Web Protection
Virtus
Filtering
FortiGuard User
Advanced
Security
Threat
Protection
Internet SaaS
© Fortinet Inc. All Rights Reserved. 15
SASE
Apps Apps Apps
Users
Agentless
IPS DLP
SSL
Users Decryption
Client-Based CASB Data Center
Branch SWG
Web Anti-
Filtering Virtus
Internet-VPN
FortiSASE
Cloud- Use Security Applications
Users Advanced
FWaaS SDWAN
On Network
Managed Threat ZTNA
Protection FortiGuard FortiGuard
DLP
Web
IPS DLP
IPS Filtering
SSL
Decryption SSL
Decryption Anti-
Virtus
Advanced User
Threat
Anti- Security
Web Protection
Virtus
Filtering
FortiGuard User
Advanced
Security
Threat
Protection
Internet SaaS
© Fortinet Inc. All Rights Reserved. 16
What is SSE (Secure Service Edge)?
SSE is focused primarily on security services
Cloud-delivered Security
FWaaS/SWG
ZTNA
DLP (optional)
SSE CASB
Browser Isolation (optional)
Secure Service Edge (SSE)
© Fortinet Inc. All Rights Reserved. 17
What is SASE (Secure Access Service Edge)?
Cloud-delivered network and security convergence solution for work-from-anywhere
Networking Cloud-delivered Security
FWaaS/SWG
ZTNA
SD-WAN DLP (optional)
CASB
SASE Browser isolation (optional)
Secure Service Edge (SSE)
© Fortinet Inc. All Rights Reserved. 18
Convergence of On-Prem and Remote Users Network
Single-vendor
SASE Benefits
Single-
Vendor SASE • Improved risk posture
On-prem Remote Users
Simplicity and reduced security gaps
NGFW Cloud-Delivered
SD-WAN
Consistent Security Security • Provide simplicity
Better User eliminating multiple products
Experience • Efficient operations
with single agent
• Cost savings from product
and vendor reduction
© Fortinet Inc. All Rights Reserved. 19
Fortinet FortiSASE
Cloud-delivered security with AI-powered security services for work-from-anywhere
Securing Remote Users Cloud-delivered Security & Networking Improved User Experience
Secure SaaS Access
Cloud CASB
Managed
SWG Secure Internet Access
SASE
Web
FWaaS
Unified Agent SD-WAN Secure Private Access
AI-Powered
Security
ZTNA
Data Center
© Fortinet Inc. All Rights Reserved. 20
Key Customer Initiatives for SASE
Branch
Transformation
Router Secure SD-WAN
Proxy
Replacement
On-prem proxy Cloud proxy
Secure Remote
Access
SASE
Legacy VPN Zero-trust
© Fortinet Inc. All Rights Reserved. 21
FortiSASE
Data Center
• FortiSASE offers comprehensive security solution for remote
workers - "Work from Anywhere" Internet
• FortiSASE offers central management of the entire security
stack including ZTNA with a simple to navigate user interface NGFW
and best practices configuration
Device Security
• FortiClient agent or PAC files are utilized to connect remote FortiSASE
Cloud Managed
users to FortiSASE Cloud for security inspection
Content Security
• FortiSASE supports remote user authentication along with
SAML SSO
Integrated
• FortiSASE Thin Edge extends the security services to remote ZTNA
SWG Web Security
branches utilizing FortiExtender
• All security inspection for endpoint traffic will be performed in
the cloud including:
• Integrated ZTNA with device posture check & continuous user
verification
• IPS, AV, Web Filtering, DLP, File Filter, and App Control
Explicit Proxy Redirection
• SSL Inspection FortiClient
• Malware Scanning with integrated Cloud or on-premises Sandbox
• FortiClient agent offers endpoint security, USB device control,
application firewall and ransomware protection
© Fortinet Inc. All Rights Reserved. 22
FortiSASE Key Features
FortiSASE Point of Presence (PoP)
• Used for traffic inspection
• Each customer selects 4 PoPs
• Fortinet has several POPs around the
world and is constantly creating new
ones
[Link]
© Fortinet Inc. All Rights Reserved. 24
DNS based in Geographical Location
• Connect FortiSASE remote users to the closest
PoP/data center for which they are licensed
• It uses GeoDNS approach => NOT Anycast
• Fortinet solution is based in AWS Route53
(there are other providers in the market)
[Link]
• Each end customer uses a different FQDN that will
be resolved by DNS to a different IP based on: [Link]
• Customer entitlement/PoP
• Customer A uses PoPs in Burnaby, Ottawa, Sophia, London
• Customer B uses PoPs in Tokyo, Frankfurt, Sophia, London
• User’s geographical location
(note a “end customer” is typically an MSSP/enterprise while “remote users” are
© Fortinet Inc. All Rights Reserved. 25
the actual final users of the security service provided by FortiSASE)
Dashboard Overview
• Checking live status updates,
including outages for security
PoPs from the Asset Map.
• Locate Asset either pop or user
• Monitoring application
bandwidth usage through a
dashboard widget.
© Fortinet Inc. All Rights Reserved. 27
FortiSASE Components
Endpoint FortiSASE (FortiOS based)
• Agent-based: FortiClient • IPS, AV, Web Filtering, DLP, File Filter, and App Control
• Endpoint Management Service
based on FortiClient EMS • SSL inspection
• FortiClient Cloud fabric connector • ZTNA
• Agentless: Web browser-based device • SPA
• SSA
© Fortinet Inc. All Rights Reserved. 28
FortiSASE Endpoint Modes
• Endpoints connect to FortiSASE through
an always-up VPN connection using
FortiClient. In endpoint mode, you can
also configure zero trust network access.
• In secure web gateway (SWG) mode,
users configure FortiSASE as a SWG
server on their device at the OS level or
in a browser
© Fortinet Inc. All Rights Reserved. 29
Profiles – General
Internet Access or Private Access. Profile groups can be configurated for granular set or rules.
• Security Profiles for Internet Access
• Can be used for granular access control.
Ex.: SIA for different user groups
• We can manipulate each security profile
according our needs for the specific user
groups.
© Fortinet Inc. All Rights Reserved. 30
Profiles – General
• Security Profile for Private Access
• Can be used for granular control of user
groups (example).
• We can manipulate according our needs
for the specific user group.
© Fortinet Inc. All Rights Reserved. 31
Profiles – Web Filter
Web Filtering can protect your network by blocking access to malicious, hacked, or inappropriate
websites.
• We can customize the filters
• Inline-CASB Headers are fully
configurable
• It’s possible to check threat logs and
general logs generated by the profile
from the configuration tab
© Fortinet Inc. All Rights Reserved. 32
Profiles – Web Filter
Customization View
• Same GUI of FortiGate
• Same options as: FortiGuard
Categories, URL Filter, Content Filter.
• Web Interface Inline-CASB Header
configuration
© Fortinet Inc. All Rights Reserved. 33
Profiles – DNS Filter
DNS filter secures your network by blocking access to a certain domain or a category of domains.
• Not supported for SWG traffic
• Blocks C&C domains. 80.000 domains in
botnet package
• It’s possible to check threat logs and
general logs generated by the profile
from the configuration tab
• Domain Filter
• Allows you to define your own domain list to
block or allow.
• Takes precedence of FortiGuard categories.
• DNS Translation
• Maps the resolved result to another IP
address that you have defined.
© Fortinet Inc. All Rights Reserved. 34
FortiCASB & Inline CASB
API-based CASB (FortiCASB)
API-based CASB is a cloud-native cloud access security
broker (CASB) service that provides visibility, compliance,
data security, and threat protection for cloud applications.
It enables deep inspection and policy management for
data stored in SaaS and IaaS applications.
Inline CASB with ZTNA and SASE
The FortiGate ZTNA access proxy can be configured to
act as an inline CASB by providing access control to SaaS
traffic using ZTNA access control rules.
FortiSASE uses application control and SSL deep
inspection to act as an inline CASB.
© Fortinet Inc. All Rights Reserved. 35
Profiles – App Control With In-line CASB
FortiSASE can recognize network traffic generated by a large number of applications. Network
traffic is analyzed to detect application traffic, even if the traffic uses non-standard ports or
protocols.
• Application Categories
• Application Overrides
• Customizable Categories
© Fortinet Inc. All Rights Reserved. 36
Profiles – SSL Inspection
SSL inspection is the key used to unlock encrypted sessions, see into encrypted packets, find
threats, and block them.
• Certificate Inspection and Deep
Inspection
• DPI available for SWG
• DPI is required for Split DNS and Inline-
CASB functionality (App Control and
Web Filtering
• Exempt hosts or categories
© Fortinet Inc. All Rights Reserved. 37
Profiles – SSL Inspection
SSL inspection is the key used to unlock encrypted sessions, see into encrypted packets, find
threats, and block them.
• Import your own certificate for SSL
Inspection
© Fortinet Inc. All Rights Reserved. 38
Profiles – File Filter
File Filter allows you to block or monitor specific file types.
• Block or monitor specific file types
• Inspection is based on file type only, not
on file content
© Fortinet Inc. All Rights Reserved. 39
Profiles – Data Leak Prevention
Data Leak Prevention prevents sensitive data from leaving or entering your network.
• Add filters based on predetermined
content patterns or customize your own
Regular Expression.
• Actions: Allow, Block or Monitor
• Protocols: SMTP, POP3, IMAP, NNTP
and HTTP-POST
© Fortinet Inc. All Rights Reserved. 40
Profiles – AntiVirus
• Traffic matching the following protocols
will be inspected: CIFS, SMTP, POP3,
IMAP, FTP and HTTP.
© Fortinet Inc. All Rights Reserved. 41
Profiles – Instrusion Prevention
Intrusion Prevention System technology protects your network from cybercriminal attacks by
actively seeking and blocking external threats before they can reach potentially vulnerable network
devices.
• Three profiles:
• Recommended - Scans traffic for all known
threats and applies the recommended action.
• Critical - Scans traffic for critical threats and
blocks them.
• Monitor - Scans traffic for threats but does not
apply any action. Primarily used for logging.
© Fortinet Inc. All Rights Reserved. 42
Profiles – Sandboxing
• Two options available:
• FortiSASE Sandbox
• Standalone FortiSandbox to configure
connection to an on-premise standalone
FortiSandbox
• Exclude files signed by trusted sources
from FortiSandbox submission. Following
is a list of sources that FortiSandbox
trusts:
• Microsoft, Fortinet, Mozilla, Windows, Google,
Skype, Apple,Yahoo!, Intel
• This feature only works for endpoints
where Sandbox Detection was enabled
when installing FortiClient.
© Fortinet Inc. All Rights Reserved. 43
Policies
Policies control where the traffic goes, how FortiSASE processes it, and whether FortiSASE allows
it to pass through.
• Two policy types:
• VPN Policies
• SWG Policies
• Granular policies filtered by users, user
groups, services, all internet traffic or
ISDB, profile groups.
• It’s possible to use ZTNA TAGs to
control access checking machine
ZTNA TAGs and conditions
User Groups
© Fortinet Inc. All Rights Reserved. 44
Policies
Policies control where the traffic goes, how FortiSASE processes it, and whether FortiSASE allows
it to pass through.
© Fortinet Inc. All Rights Reserved. 45
Authentication Sources and Access
In Authentication Sources and Access, you can control network access for different users and
devices in your network. FortiSASE authentication controls system access by user group
• LDAP - Configure remote users over LDAP to
easily integrate FortiSASE with a Windows
Active Directory (AD) server or another LDAP
server.
• RADIUS - Configure remote authentication
with a RADIUS server. You can allow all users
from the IdP or define a group.
• Single sign on (SSO) - Configure an SSO
connection with an authentication server such
as Azure AD or Okta, where Azure AD or Okta
is the identity provider (IdP) and FortiSASE is
the service provider (SP).
• Local
© Fortinet Inc. All Rights Reserved. 46
Client Onboarding
How a user connects depends on if their endpoint is managed by FortiClient or not. Managed
endpoints connect using VPN. Agentless users connect using Secure Web Gateway.
Invitation Code - This is the code to input into
FortiClient to allow managed users to be
automatically provisioned to connect to
FortiSASE.
Preconfigured FortiClient Installers - These
installers are preconfigured with your
FortiSASE invitation code.
Generic FortiClient Installers -
These installers are publicly available installers
that do not come preconfigured with your
FortiSASE invitation code.
Invite Users - Click + to add a blank field
where you can enter the email address of the
managed endpoint users to onboard to
FortiSASE.
© Fortinet Inc. All Rights Reserved. 47
Secure Private Access (SPA) - SD-WAN and IPSec
• FortiSASE supports secure private access
(SPA) using SD-WAN or SPA using a next
generation firewall converted to a standalone
FortiSASE SPA hub.
• It forms a traditional hub-and-spoke topology
that supports the Fortinet autodiscovery VPN
(ADVPN) configuration.
• The PoPs acts as a spokes
• FortiSASE remote users may access private
resources behind FortiGate hub(s) directly
through FortiSASE to hub(s) IPsec tunnels. If
a private resource is behind an organization’s
spoke device, they may connect directly to
that resource through an on-demand
© Fortinet Inc. All Rights Reserved. 48
ZTNA Access Proxies
ZTNA
Never trust,
Access Proxy
always verify
Cloud
Client Web App 1
Access Proxy
File Share
Identify users,
Posture Tags
validate devices
Web App 2
ON/OFF
Network RDP
Secure just
Data Center enough access
Continuous Trust Check
Access Specific Applications
ZTNA Policy Continuous
User Contextual Rule Set posture re-evaluation
DC Independent
© Fortinet Inc. All Rights Reserved. 49
Analytics - FortiView
The following FortiView monitors are available in FortiSASE:
You can create and modify a custom monitor
© Fortinet Inc. All Rights Reserved. 50
Analytics - Reports
Reports and logs are useful components to help you understand what is happening on your
network, and to inform you about network activities, such as a virus detection, visit to an invalid
website, intrusion, failed login attempt, and others.
© Fortinet Inc. All Rights Reserved. 51
Analytics – External Log Server
Traffic Logs
Security Logs
Local data can be retained for up to 90 days
External log server
© Fortinet Inc. All Rights Reserved. 52
Use Cases
USE CASE 1
Secure Internet Access (SIA) for Remote Users
Internet
Safe browsing from anywhere
Malware & ransomware prevention
Continuously assess the risks and automatically
respond to counter known and unknown threats
Management Plane
Deep inspection of end-user activity
Constant inspection of web activity for threats,
SWG FWaaS even when using secured HTTPS access
Market Leading Security as a Service
Fortinet best-in-class Cloud security efficacy
Agentless Agent powered by FortiGuard Labs
FortiClient
© Fortinet Inc. All Rights Reserved. 54
Security Configuration - One Enforcement Location
2 3
1 Simplified FOS
Security from
1
single pane
2 Default profiles
available for fast
consumption
z
3 Web and Private
App visibility
4
4 Security profiles
can be customized
© Fortinet Inc. All Rights Reserved. 55
USE CASE 2
Flexible Secure Private Access (SPA)
Internet
Apps Secure corporate app access
DCs/Cloud
FGT Secure Cloud & datacenter app access
Anywhere secure access to corporate apps
Management
for asset protection and compliance
Plane
Apps
ZTNA SD-WAN
HQs/Branches
Highly granular Access Control
Context-based zero-trust access enforcement,
FGT
app based and adaptive with AI/ML
SWG FWaaS
On-prem SD-WAN integration
Superior user experience with full integration
Agentless Agent with Fortinet SD-WAN architecture
FortiClient
© Fortinet Inc. All Rights Reserved. 56
SPA with SD-WAN
Private
Apps
SD-WAN Private Access
Data Center
Management
Plane
Augment to existing SD-WAN
ZTNA SD-WAN
Private
Apps Intelligent routing & steering
SWG FWaaS
Data Center
Broader app support
(UDP-based VoIP, video, UC)
Agent
FortiClient
© Fortinet Inc. All Rights Reserved. 57
FortiSASE SPA
Bridge to securely connect remote users to their private applications
SD-WAN
Datacenters
Available
PoPs
Remote
User
© Fortinet Inc. All Rights Reserved. 58
SPA with ZTNA
Private
Apps Enabling Universal ZTNA
DCs/Cloud
App Gateway
Cloud provisioned
ZTNA connections
FWaaS Management
Plane
Private
Apps Device attributes, user info,
posture-based security
HQs/Branches
SWG ZTNA
App Gateway
Granular per-session
posture checks
Continuous posture
Agent re-assessment
FortiClient
© Fortinet Inc. All Rights Reserved. 59
USE CASE 3
Secure SaaS Access (SSA) for Visibility and Control
Internet Secure Access to Cloud apps and files
Cloud App Access Control
API-CASB
Safe Cloud Application access and blocking
of malicious apps with in-line CASB feature
IL-CASB Management
Plane
Deep control & view of apps content
Control over app content and files with API-based
FWaaS CASB for enhanced security and threat detection
SWG
Unified agent for anywhere detection
FortiClient Agent covers all the use-cases
Agentless Agent from SASE, Zero-trust, SaaS security,
and End-Point Protection
FortiClient
© Fortinet Inc. All Rights Reserved. 60
FortiSASE - The Fortinet Advantage
Secure Adaptive Simple Efficient
Users Context-based Single agent Best-in-class
— security — —
Endpoints — Configuration High performance
— AI-powered threat — —
Applications detection Management Integration
© Fortinet Inc. All Rights Reserved. 61
BoM
FortiSASE Licensing
© Fortinet Inc. All Rights Reserved. 63
Differentiators
Differentiators
• Simplified license
• Per user (3) or endpoints
• Bandwidth
• SD-WAN and NGFW market leader
• SD-WAN on SASE
• Simplified integration with on-premises
• Leverage existing customer base
© Fortinet Inc. All Rights Reserved. 65
Consulting Services
Cloud Consulting Services
Cloud Data Center Internet/SaaS
Cloud Consulting
• Create a hybrid network and
security solution
• Blueprint for SASE transformation
• Align stakeholders around the
most urgent and impactful ZTNA
initiatives FortiSASE Device Security
Cloud Managed
• Strategy to move forward towards
Content Security
SASE/ZTNA
Web Security
• Implementation plan
Network Edge Remote Users
© Fortinet Inc. All Rights Reserved. 67
Cloud Consulting Services
Cloud Data Center Internet/SaaS
Cloud Consulting
• Create a hybrid network and
security solution
• Blueprint for SASE transformation
• Align stakeholders around the
most urgent and impactful ZTNA
initiatives FortiSASE Device Security
Cloud Managed
• Strategy to move forward towards
Cloud Consulting Content Security
SASE/ZTNA
Web Security
• Implementation plan
Network Edge Remote Users
© Fortinet Inc. All Rights Reserved. 68
Cloud Consulting Services
Cloud Data Center Internet/SaaS
Cloud Consulting
• Create a hybrid network and
security solution
• Blueprint for SASE transformation
• Align stakeholders around the SPA SDWAN
Cloud Consulting
most urgent and impactful ZTNA
initiatives FortiSASE Device Security
Cloud Managed
• Strategy to move forward towards
Cloud Consulting Content Security
SASE/ZTNA
Web Security
• Implementation plan
Network Edge Remote Users
© Fortinet Inc. All Rights Reserved. 69
Cloud Consulting Services
Cloud Data Center Internet/SaaS
Cloud Consulting
• Create a hybrid network and
security solution
• Blueprint for SASE transformation
• Align stakeholders around the SPA SDWAN
Cloud Consulting
most urgent and impactful ZTNA
initiatives FortiSASE Device Security
Cloud Managed
• Strategy to move forward towards
Cloud Consulting Content Security
SASE/ZTNA
Web Security
• Implementation plan
Policy Migration
Network Edge Cloud Consulting Remote Users
© Fortinet Inc. All Rights Reserved. 70
Cloud Consulting Services
Cloud Data Center Internet/SaaS
Cloud Consulting
• Create a hybrid network and
security solution
• Blueprint for SASE transformation
• Align stakeholders around the SPA SDWAN
Cloud Consulting
most urgent and impactful ZTNA
initiatives FortiSASE Device Security
Cloud Managed
• Strategy to move forward towards
Cloud Consulting Content Security
SASE/ZTNA
Web Security
• Implementation plan
ZTNA Policy
Policy Migration
Cloud Consulting
Network Edge Cloud Consulting Remote Users
© Fortinet Inc. All Rights Reserved. 71
LAB
Access to Lab – Instances Assignment
Use the following link to assign HOL Instance:
[Link]
• Passphrase: SASE-SP1
• LAB GUIDE
Compartilhamento Canais
Password: wYxpDi5w
[Link]
© Fortinet Inc. All Rights Reserved. 73
