Licensing

Question 1

FortiSASE offers 3 different license tiers:
- Standard: 50-99 Users, SWG, FWaaS, FortiClient & EEP, ZTNA, CASB (in-line & API), DLP, Sandbox, SASE Cloud login, Fortinet Cloud POPs
- Advance: 100-199 Users, Standard license plus: DEM, SOCaaS integration, Dedicated IPs, FortiGuard Forensics.
- Comprehensive: 200+ Users, Advance license plus: POPs can be hosted on Public/Fortinet Cloud

** Region add-on license can provide access to a maximum of 16 additional POPs.

Question 2

Licensing User-Based:
- Modes: Agent-based or Proxy-based
- User-based licenses allow multiple devices concurrently.
- Proxy-based: FWaaS, SWG, URL Filtering, Anti-Malwr, DNS filtering, FW layer 3-7, CASB in-line.
- Agent-based: FortiClient installed, Proxy-mod features plus: EPP, ZTNA, Sandboxing, Vuln Mngmt, VPN

Question 3

SPA (Secure Private Access) Add-on:
- It allows remote users and branch locations to connect to private apps.
- If FG in HA you will need separate SPA license for each.
- FortiSASE and Fortigate Hub should be registered under same FortiCloud account.
- To establish dedicated tunnel to FortiSASE the Fortigate SD-WAN hub needs an SPA license

Question 4

Edge Device Add-On:
- Edge device license enables customers to connect branch offices to FortiSASE.
- Supported only on certain models of FortiExtender, FortiGate, FortiAP, FortiBranchSASE
- Each edge devide requires a FortiSASE subscription license.
- Each edge device and FortiSASE should be registered under same FortiCloud account.
- 0-touch provisioning using FortiZTP (FortiEX, FortiBranchSASE or FortiAP)
- SIA to remote branches connected to FortiEX, FortiAP or FortiGate