Geofencing allows the administrator to restrict or allow access to FortiSASE services based on the geographic location of the endpoints, effectively blocking connections from specified countries.

In FortiSASE, the Software Installations page (located under Network > Managed Endpoints) provides a centralized view of all software inventory reported by the FortiClient agents. This feature is essential for administrators to maintain visibility into the environment and identify potentially unwanted applications (PUA) or unauthorized software installed on remote devices.
* Software Inventory Reporting: FortiClient sends the endpoint's software inventory to FortiSASE upon initial registration and updates the portal whenever a change-such as an installation, update, or removal-occurs on the endpoint.
* Available Information (Vendor): When viewing the global list of applications, the portal displays detailed metadata for each software entry. This includes the Vendor of the software and its specific version, allowing administrators to differentiate between reputable enterprise applications and suspicious third-party utilities.
* Available Information (Endpoint Association): The interface includes an Endpoint Count field that indicates how many devices have a specific application installed. By selecting a specific application and using the View Endpoints action, the administrator can see a list of every individual endpoint where that software is currently active.
* Incorrect Options: While license management is a general feature of the ecosystem, the Software Installations page itself does not track the license status of individual third-party applications (Option B). Similarly, while FortiSASE monitors traffic, the Software Installations inventory page does not report on the usage frequency (how often a user opens or uses the app) of the installed binaries (Option D).
By leveraging this inventory, administrators can proactively manage risk by identifying endpoints that possess high-risk software and taking remediation steps or applying ZTNA posture tags based on the presence of specific unauthorized software.

The Secure Private Access add-on enables FortiSASE remote users to reach private resources by providing private application access capabilities through SPA-based connectivity and secure tunneling into internal environments.

During initial provisioning, you can select fewer security sites than the maximum you are entitled to. In this case, upon each login, the FortiSASE portal prompts you to select up to the maximum number of security sites. If you add additional security sites using this prompt, then FortiSASE allows for increasing the number of security sites without FortiCare Support. FortiSASE may experience up to 10 minutes of downtime when you apply the entitlement. If any errors occur, FortiSASE cannot automatically rollback without FortiCare Support. For provisioning, you must select a minimum of two security sites for redundancy.
https://docs.fortinet.com/document/fortisase/latest/administration-guide/751044/appendix-a- fortisase-data-centers#Number

FortiSASE is designed as a unified, single-vendor solution that specifically targets the convergence of networking and security to address the modern challenges of a distributed enterprise. 2
* Multicloud and SaaS Adoption: FortiSASE addresses the surge in cloud-first strategies by providing Next-Generation Dual-Mode CASB (Cloud Access Security Broker). 3 This feature uses both inline and API-based inspection to provide comprehensive visibility into sanctioned and unsanctioned SaaS applications (Shadow IT), ensuring that data is protected regardless of whether it resides in AWS, Azure, Google Cloud, or SaaS platforms like Microsoft 365.
* Hybrid Workforce: To support a workforce that moves between the home, the office, and public spaces, FortiSASE delivers consistent security posture . 5 It replaces the inconsistent experience of legacy VPNs with a geographically dispersed network of over 150 Points of Presence (PoPs), ensuring low-latency access to applications while maintaining high-performance SSL inspection and threat detection for all remote users.
* Zero Trust Integration: Central to the FortiSASE architecture is Universal ZTNA (Zero Trust Network Access). 7 Unlike traditional VPNs that grant broad network access, ZTNA applies the principle of " never trust, always verify " . It grants access on a per-session, per-application basis, continuously verifying the device posture and user identity before and during application access. 9 This shift from implicit to explicit trust significantly reduces the internal attack surface and mitigates the risk of lateral movement by attackers.
By integrating these components into a single operating system ( FortiOS ) and managed via a single console, FortiSASE simplifies IT operations while delivering the visibility and control required for today ' s multicloud and hybrid environments.