The Secure Web Gateway (SWG) policy is used to control traffic between the FortiClient endpoint and FortiSASE for secure internet access. SWG provides comprehensive web security by enforcing policies that manage and monitor user access to the internet.
* Secure Web Gateway (SWG) Policy:
* SWG policies are designed to protect users from web-based threats and enforce acceptable use policies.
* These policies control and monitor user traffic to and from the internet, ensuring that security protocols are followed.
* Traffic Control:
* The SWG policy intercepts all web traffic, inspects it, and applies security rules before allowing or blocking access.
* This policy type is crucial for providing secure internet access to users connecting through FortiSASE.
References:
FortiOS 7.6 Administration Guide: Details on configuring and managing SWG policies.
FortiSASE 23.2 Documentation: Explains the role of SWG in securing internet access for endpoints.

ZTNA ensures that remote users can securely connect to private applications based on identity verification and security policies, without needing a traditional VPN. This access method provides strong security with least-privilege access, which is ideal for protecting private web servers and their data from unauthorized access. It also improves efficiency by dynamically verifying user identity and device posture before granting access.

FortiSASE uses tokenization to mask sensitive user information in logs, replacing identifiable data with tokens while preserving log structure for analysis and correlation without exposing the original user identity.

FortiSASE relies on an external Identity Provider (IdP) for SAML authentication and can use SAML group matching from the IdP to assign users to FortiSASE groups and policies. It does not act as an IdP itself.

The Secure Private Access (SPA) use case supports up to 16 SPA service connections (SPA hubs), which defines the maximum number of hub-based connections that can be established for private application access within the SPA architecture.