Logging settings in FortiSASE are configured through the FortiSASE Admin Portal, where administrators can manage log storage, forwarding, and monitoring preferences.

FortiSASE supports redundancy and resiliency by allowing branch devices to establish connections to multiple on-ramp locations. Additionally, SSL deep inspection for site-based users can function properly when traffic is routed through FortiSASE without requiring manual installation of a FortiSASE CA certificate on endpoints, as inspection is handled within the secure cloud service infrastructure.

In a default FortiSASE deployment, the tunnel profile (for secure connectivity) and the FortiSASE CA certificate (for SSL inspection and trusted communication) are automatically pushed to FortiClient endpoints.

Single Sign-On (SSO) overrides any other previously configured user authentication method on FortiSASE, taking precedence for user authentication.

Device identification can be configured on FortiSASE as an extra layer of security during FortiClient registration to ensure that only authorized devices can connect to the FortiSASE service.