In FortiSASE, Single Sign-On (SSO) takes precedence and overrides other configured user authentication methods, ensuring a centralized and streamlined authentication process across services.

The self-registration portal is the recommended method for granting temporary internet access to contractors or guests. It provides a simple and secure way for the contractor to authenticate and access the internet without requiring full endpoint management or policy configuration.

Deploying FortiSASE with FortiGate ZTNA access proxy enables efficient access to private applications with reduced latency and supports both agentless and agent-based ZTNA methods for flexible access control.

ZTNA enforces least-privileged access by verifying user identity and device posture before granting access to specific corporate applications, even when protected by an on-premises FortiGate.

According to the FortiOS Administration Guide, when configuring central management, a FortiManager Cloud entitlement must be present and the devices must share the same FortiCloud account for registration. Specifically:

“The FortiManager Cloud button can only be selected if you have a FortiManager Cloud product entitlement.”

“The FortiGate and FortiCloud license are registered to the same account.”

Thus, the two verified requirements are: B (entitlement) and D (same FortiCloud account).

The Digital Experience Monitor (DEM) in FortiSASE measures and monitors network performance from the FortiSASE Points of Presence (PoPs) to specific SaaS or cloud applications, helping identify and troubleshoot performance issues across the service path.