In this article, I will provide a diagram of an example of a FortiSASE deployment (forgive me for my lack of artistic ability and use of eraser). Fortinet offers a range of components that contribute to a Secure Access Service Edge (SASE) solution, providing comprehensive networking and security functionalities to address the needs of modern distributed organizations. SASE solutions are beginning to become more and more mainstream. Especially as workloads become cloud-native, organizations need to protect their access and data. Here are some key components of Fortinet’s SASE solution and where they typically reside.
FortiGate Secure SD-WAN in a SASE Diagram
FortiGate Secure SD-WAN appliances serve as the foundation of Fortinet’s SASE solution, providing networking and security capabilities at the network edge. These appliances combine SD-WAN functionality with next-generation firewall (NGFW) features, intrusion prevention system (IPS), antivirus, web filtering, and more. FortiGate Secure SD-WAN devices can be deployed on-premises at branch offices, data centers, or remote sites to provide secure connectivity and access to cloud resources.
FortiManager‘s Role in SASE
FortiManager is a centralized management platform that provides unified management and orchestration of networking and security policies across distributed FortiGate Secure SD-WAN deployments. It allows administrators to configure policies, monitor device status, and perform software updates from a single console. FortiManager can be deployed on-premises or in the cloud, depending on the organization’s requirements.
FortiAnalyzer‘s Role in SASE
FortiAnalyzer is a centralized logging and analytics platform that provides real-time visibility into network traffic, security events, and user activities within the Fortinet SASE environment. It collects and analyzes log data from FortiGate Secure SD-WAN appliances, providing insights into security posture, performance metrics, and compliance status. FortiAnalyzer can be deployed on-premises or in the cloud to meet the organization’s logging and reporting needs.
FortiCASB (Cloud Access Security Broker) in SASE
FortiCASB is a cloud-native security solution that provides visibility, compliance, and data protection capabilities for cloud-based applications and services. It integrates with Fortinet’s SASE architecture to extend security controls and policy enforcement to cloud environments. FortiCASB resides in the cloud and operates as a SaaS (Software as a Service) offering, allowing organizations to monitor and protect their cloud assets from anywhere.
FortiClient Endpoint Security
FortiClient is an endpoint security solution that provides comprehensive protection for desktops, laptops, and mobile devices. FortiClient is really the solution that will enable ZTNA features for you. It integrates with Fortinet’s SASE solution to enforce security policies at the endpoint, including antivirus, web filtering, VPN connectivity, and device compliance checks. FortiClient agents reside on endpoint devices and communicate with FortiGate Secure SD-WAN appliances for policy enforcement and threat detection.
FortiGuard Security Services Role in the SASE Diagram
FortiGuard Security Services provide threat intelligence feeds, security updates, and signature databases to enhance the protection offered by Fortinet’s SASE solution. These services include antivirus, intrusion prevention, web filtering, application control, and more. FortiGuard Security Services reside in the cloud and are continuously updated to protect against emerging threats and vulnerabilities.
FortiSASE Solution
Overall, Fortinet’s SASE solution combines these components to deliver secure connectivity, advanced threat protection, and centralized management across distributed environments. Depending on the organization’s requirements and deployment preferences, these components can be deployed on-premises, in the cloud, or as a combination of both to meet the needs of modern network architectures. You should seek the help of a professional integrations partner to really vet out your needs and design an appropriate solution for you. The great thing about Fortinet is that they are arguably the only current vendor that can complete a SASE solution (as of February 2024).