fortisase ordering guide

This guide provides comprehensive information on ordering FortiSASE, a cloud-delivered Secure Access Service Edge (SASE) solution from Fortinet. Explore licensing options, subscription types, hardware choices, deployment scenarios, and support resources to ensure a seamless and secure implementation of FortiSASE for your organization.

Introduction to FortiSASE

FortiSASE, a cloud-delivered Secure Access Service Edge (SASE) solution from Fortinet, provides comprehensive security and networking capabilities for modern, hybrid workforces. It extends your corporate perimeter to secure data flow to/from all endpoints, offering seamless and secure access to the Internet, private applications, and SaaS applications, regardless of location. FortiSASE seamlessly integrates SD-WAN with cloud-delivered security services, delivering a unified platform that simplifies operations and optimizes performance.

This innovative solution empowers businesses to enhance their security posture and improve user experience by converging networking and security in the cloud. FortiSASE leverages Fortinet’s industry-leading FortiGuard AI/ML-powered threat intelligence to deliver advanced protection against evolving threats, ensuring a robust and proactive security approach.

FortiSASE provides a comprehensive set of security features, including⁚

• Secure Web Gateway (SWG)
• Zero Trust Network Access (ZTNA)
• Cloud Access Security Broker (CASB)
• Firewall as a Service (FWaaS)
• Data Loss Prevention (DLP)
• Software-Defined Wide Area Network (SD-WAN)

This powerful combination of features enables organizations to secure their digital assets, protect their data, and ensure user productivity in a rapidly evolving threat landscape.

FortiSASE Features and Benefits

FortiSASE offers a comprehensive suite of features and benefits designed to enhance security, improve user experience, and streamline operations for businesses of all sizes. It combines advanced security capabilities with robust networking functionalities, delivering a unified platform that simplifies management and optimizes performance.

Key features of FortiSASE include⁚

• Unified Security⁚ FortiSASE consolidates multiple security services into a single platform, providing comprehensive protection against a wide range of threats. This includes secure web gateway (SWG), zero trust network access (ZTNA), cloud access security broker (CASB), firewall as a service (FWaaS), data loss prevention (DLP), and more.
• Simplified Management⁚ Centralized management and policy enforcement simplify administration and reduce the complexity of managing multiple security solutions. This enables organizations to streamline operations and optimize efficiency.
• Improved User Experience⁚ FortiSASE provides seamless and secure access to applications and resources, regardless of location. This enhances user productivity and reduces downtime.
• Scalability and Flexibility⁚ FortiSASE scales effortlessly to meet the evolving needs of businesses. It can be deployed in various configurations to accommodate different business requirements and network environments.
• Cost-Effectiveness⁚ FortiSASE offers a cost-effective solution compared to traditional security infrastructure. It eliminates the need for multiple hardware appliances and simplifies management, reducing operational costs.

By leveraging FortiSASE, organizations can achieve a more secure, efficient, and user-friendly digital environment, empowering them to thrive in today’s challenging threat landscape.

FortiSASE Ordering Options

Fortinet offers a variety of FortiSASE ordering options to cater to the diverse needs of businesses. These options provide flexibility and control over deployment, ensuring that organizations can select the most suitable configuration for their specific requirements.

Here’s a breakdown of the key ordering options for FortiSASE⁚

• Remote User Subscriptions⁚ This option is ideal for organizations with a dispersed workforce. It provides cloud-based firewall and secure web proxy services, ensuring secure access for remote users regardless of location.
• Branch Office Subscriptions⁚ For organizations with branch offices, this option allows them to add subscriptions for these locations to an existing FortiSASE User Subscription. This extends secure access to branch offices while maintaining centralized management.
• FortiGate SD-WAN⁚ Integrate FortiGate SD-WAN devices with FortiSASE, enabling secure and optimized connectivity for branch locations and remote users;
• Third-Party SD-WAN⁚ Connect third-party SD-WAN solutions to FortiSASE via IPsec, extending FortiSASE’s security services to these networks.

Fortinet also offers user-based and device-based licensing options, as well as various hardware choices, including FortiGate appliances, to meet specific deployment scenarios and scalability requirements.

FortiSASE Subscription Types

Fortinet offers two primary FortiSASE subscription types⁚ Standard and Premium. These subscriptions cater to different security and performance requirements, allowing organizations to choose the option that best aligns with their specific needs and budget.

Here’s a detailed comparison of the two FortiSASE subscription types⁚

Standard Subscription

• Provides cloud-delivered security services, including IPS, Web, DNS, SSL, Anti-Malware, and CASB.
• Offers secure private access via a unified agent (SASE, ZTNA, EPP) or agent-less via SWG.
• Suitable for organizations with basic security requirements and a cost-effective approach.

Premium Subscription

• Includes all features of the Standard Subscription with enhanced performance, security, and advanced features.
• Provides comprehensive threat protection and advanced security capabilities.
• Ideal for organizations with stringent security demands and a need for enhanced performance and functionality.

Choosing the right FortiSASE subscription type is crucial for achieving optimal security, performance, and cost-effectiveness. Consider your organization’s unique requirements and security posture when making this decision.

Standard Subscription

The FortiSASE Standard Subscription is designed for organizations seeking a cost-effective and comprehensive security solution for their remote workforce. This subscription offers a foundational set of security features and capabilities, providing a robust baseline of protection against common threats.

Key features of the FortiSASE Standard Subscription include⁚

• Cloud-Delivered Security Services⁚ Leverages Fortinet’s FortiGuard Labs for threat intelligence and protection, encompassing features like IPS, Web filtering, DNS security, SSL inspection, anti-malware, and CASB (Cloud Access Security Broker).
• Secure Private Access⁚ Provides secure access to corporate resources and applications through a unified agent (SASE, ZTNA, EPP) or an agent-less approach using SWG (Secure Web Gateway), ensuring that only authorized users can access sensitive information.
• Cost-Effective Solution⁚ Offers a balanced approach between security and affordability, making it suitable for organizations with a limited budget or those seeking a basic yet effective security solution for their remote users.

The Standard Subscription is a solid foundation for organizations seeking to enhance their security posture and safeguard remote users from common threats. Consider this option if you require a comprehensive and cost-effective solution for your organization’s remote workforce.

Premium Subscription

For organizations demanding advanced security features and comprehensive threat protection, the FortiSASE Premium Subscription provides an enhanced layer of security and functionality. This subscription is tailored for organizations with stringent security requirements and a need for advanced threat detection and response capabilities.

The FortiSASE Premium Subscription elevates security with⁚

• Advanced Threat Protection⁚ Goes beyond basic security features to include advanced threat detection and prevention mechanisms, such as machine learning-based threat intelligence, sandboxing, and advanced malware analysis, providing a more proactive defense against sophisticated threats.
• Enhanced Security Features⁚ Includes additional security features like DLP (Data Loss Prevention), providing granular control over sensitive data and preventing unauthorized data exfiltration, bolstering data protection and regulatory compliance.
• Comprehensive Security Posture⁚ Offers a comprehensive security approach, encompassing security features for network access, web browsing, application usage, and data protection, delivering a robust and multi-layered security posture for enhanced protection against evolving threats.

The Premium Subscription is ideal for organizations with critical data and sensitive information, those facing advanced threats, or those seeking a robust and comprehensive security solution for their remote workforce. This subscription provides the highest level of security and protection, ensuring peace of mind for organizations with complex security needs.

FortiSASE Licensing

FortiSASE licensing is designed to provide flexibility and scalability to meet the needs of various organizations. Fortinet offers two primary licensing models to ensure optimal cost-effectiveness and security coverage⁚

• User-Based Licensing⁚ This model grants access to FortiSASE based on the number of users who require secure remote access. This is ideal for organizations with a well-defined user base and a focus on managing access rights per user. It simplifies user management and provides granular control over security policies and access permissions.
• Device-Based Licensing⁚ This model grants access based on the number of devices requiring secure access, such as laptops, smartphones, or tablets. This model is suited for organizations with a large number of devices that need secure access and where user identity management is less critical. Device-based licensing provides a straightforward approach to securing access for all devices within a specific organization.

Choosing the appropriate licensing model depends on your organization’s structure, user base, and security requirements. Fortinet’s licensing options provide a flexible framework for securing your remote workforce and accessing applications securely, whether you prioritize user identity management or device-level security.

User-Based Licensing

User-based licensing for FortiSASE is a flexible approach that grants access to the service based on the number of individual users requiring secure remote access. This licensing model is particularly suitable for organizations that have a well-defined user base and prioritize user identity management. It offers a granular level of control over security policies and access permissions, ensuring that only authorized individuals can access sensitive data and applications.

With user-based licensing, each user is assigned a unique license, enabling administrators to manage access rights and security policies on a per-user basis. This approach promotes robust security by controlling access based on user identity, ensuring that only authorized individuals have access to company resources. User-based licensing aligns well with Zero Trust principles, where access is granted on a need-to-know basis and continuously verified.

Device-Based Licensing

Device-based licensing for FortiSASE provides a straightforward approach to securing access for devices rather than individual users. This model is ideal for organizations with a significant number of devices, such as laptops, desktops, or mobile devices, that need secure access to company resources. It offers a simplified way to manage access rights and security policies across devices, promoting a consistent level of protection.

Device-based licensing assigns a license to each device, regardless of the user accessing it. This approach is particularly valuable for situations where devices are shared among users or where individual user identification is less critical. Device-based licensing streamlines the management process, as administrators can configure security policies for entire device groups, ensuring consistent protection across all devices within a group.

FortiSASE Hardware Options

FortiSASE offers a flexible approach to hardware deployment, allowing organizations to choose the option that best suits their needs and infrastructure. The available hardware options provide a range of capabilities and scalability, enabling organizations to tailor their FortiSASE solution to specific requirements. Whether organizations require centralized management, edge-based security, or a combination of both, FortiSASE provides the flexibility to optimize their security posture.

Fortinet offers a variety of FortiGate SD-WAN devices for use with FortiSASE. These devices serve as secure hubs for connecting remote users, branch offices, and SD-WAN locations to the FortiSASE cloud platform. The FortiGate SD-WAN devices provide robust security features, including next-generation firewall (NGFW) capabilities, SD-WAN functionality, and integrated threat protection. Organizations can choose from different FortiGate models based on their performance, capacity, and connectivity requirements.

FortiSASE Deployment Scenarios

FortiSASE provides a versatile platform for securing access to applications and resources across various deployment scenarios, catering to diverse organizational needs. Whether securing remote users, protecting branch offices, or enhancing SD-WAN deployments, FortiSASE delivers a comprehensive and adaptable security solution. These deployment scenarios demonstrate the flexibility and scalability of FortiSASE, enabling organizations to implement secure access solutions tailored to their specific environments.

FortiSASE effectively extends the corporate perimeter to secure data flow to/from all endpoints, ensuring secure access to the Internet, private applications, and SaaS applications. This comprehensive approach simplifies operations and provides a unified security framework, regardless of user location or device type. Organizations can leverage FortiSASE to protect their sensitive data and applications, while enhancing user productivity and ensuring compliance with industry regulations.

Remote User Deployment

FortiSASE seamlessly secures remote users, extending the corporate perimeter to encompass geographically dispersed workforces. This deployment scenario is ideal for organizations with employees working from home, coffee shops, or other remote locations. FortiSASE provides a secure and reliable connection to corporate resources, ensuring that remote users can access applications and data securely, regardless of their location or device. The solution offers a comprehensive suite of security features, including firewall protection, web filtering, anti-malware, and data loss prevention (DLP), safeguarding sensitive information from unauthorized access and threats.

FortiSASE’s cloud-delivered architecture simplifies remote user deployment, eliminating the need for on-premises infrastructure and reducing administrative overhead. The solution is easily integrated with existing IT systems, providing a seamless user experience. Organizations can leverage FortiSASE to enhance remote user security, streamline operations, and ensure business continuity, even in the face of evolving security threats.

Branch Office Deployment

FortiSASE empowers businesses to securely connect their branch offices to corporate resources, extending the corporate perimeter to encompass geographically dispersed locations. This deployment scenario is ideal for organizations with multiple branch offices, providing a centralized security platform for managing and securing network access from these locations. FortiSASE delivers comprehensive security features, including next-generation firewall (NGFW), intrusion prevention system (IPS), web filtering, and data loss prevention (DLP), safeguarding branch office networks from threats and ensuring compliance with industry regulations.

FortiSASE’s cloud-delivered architecture simplifies branch office deployment, eliminating the need for on-premises security appliances and reducing administrative overhead. The solution seamlessly integrates with existing IT infrastructure, providing a unified management platform for both branch offices and corporate headquarters. Organizations can leverage FortiSASE to enhance branch office security, improve network performance, and streamline operations, ensuring a secure and reliable connection to corporate resources for all branch office users.

SD-WAN Deployment

FortiSASE integrates seamlessly with SD-WAN deployments, providing a comprehensive security solution for modern, distributed networks. By combining SD-WAN’s network optimization capabilities with FortiSASE’s robust security features, organizations can achieve secure and efficient connectivity across geographically dispersed locations. FortiSASE acts as a secure gateway for SD-WAN traffic, enforcing security policies and protecting against threats at the network edge.

With FortiSASE, organizations can benefit from the advantages of SD-WAN, including improved network performance, reduced bandwidth costs, and simplified network management, while simultaneously enhancing security. This approach allows businesses to leverage the flexibility and cost-effectiveness of SD-WAN while maintaining a high level of security for their distributed network. FortiSASE’s integrated security capabilities ensure that all SD-WAN traffic is subject to rigorous security checks, safeguarding sensitive data and applications from unauthorized access and cyber threats.

FortiSASE Support and Resources

Fortinet provides comprehensive support and resources to ensure a smooth implementation and ongoing success with FortiSASE. Access a wealth of information, including detailed documentation, online forums, and technical support services, to address your specific needs. Fortinet’s documentation library offers comprehensive guides and resources for FortiSASE, covering deployment, configuration, troubleshooting, and best practices. Explore these resources to gain a thorough understanding of FortiSASE’s functionalities and optimize its use within your environment.

Engaging with Fortinet’s online forums allows you to connect with a vibrant community of FortiSASE users, sharing experiences, seeking advice, and collaborating on solutions. This platform provides a valuable resource for resolving technical challenges and gaining insights from peers. Fortinet’s dedicated technical support team is readily available to assist you with any technical inquiries or issues you may encounter. Leverage their expertise to address complex configurations, troubleshoot problems, and ensure seamless operation of your FortiSASE deployment.