Fully remote SaaS company
A SaaS company whose employees connect from different cities inspects internet traffic at a local PoP via FortiSASE; the central VPN gateway becomes unnecessary.
Fortinet · Network Security and SD-WAN
FortiSASE
Cloud-delivered Secure Access Service Edge for hybrid workers.
Quick answer
FortiSASE is Fortinet's cloud-delivered SASE service. It unifies SWG, CASB, ZTNA and FWaaS in a single cloud console; users get the same security policy from any location when accessing the internet, SaaS apps and private applications.
FortiSASE implements Gartner's SASE framework as a Fortinet cloud service. A single FortiClient agent connects the hybrid worker to the organization; traffic is inspected at global Fortinet PoPs.
Versus the legacy VPN model, users no longer backhaul traffic to HQ — internet traffic exits at the nearest FortiSASE PoP. This reduces latency and cost.
ZTNA (Zero Trust Network Access) means users do not connect to a 'network' — they get identity + device + context-based access to each application. Lateral movement risk drops significantly.
Key features
What it offers
- SWG, CASB, ZTNA and FWaaS in one cloud service
- Low latency via global PoPs
- Single FortiClient agent
- Application-based policy
- Unified logs in FortiAnalyzer
- Inline and API CASB
- Hybrid management with FortiGate
- Identity-aware proxy
Tech Summary
Important technical data
- Architecture
- Cloud-delivered SASE
- PoP locations
- 100+ global, EU PoPs for Türkiye
- Agent
- FortiClient (Windows, macOS, Linux, iOS, Android)
- Licensing
- Per user, annual
- Management
- FortiSASE Console (SaaS)
- Logs
- FortiAnalyzer Cloud integrated
Use CasesSoftware Consulting Retail Education
When would you choose this product?
Secure access at customer sites
Consultants working at customer locations connect through FortiClient to FortiSASE; each application is accessed via ZTNA.
Branch + headquarters hybrid
FortiGate at retail branches, FortiSASE for HQ hybrid workers; managed from a single console.
University student access
A university provides students with secure access to the library and LMS from home via FortiSASE.
Who is it for?
Hybrid/remote-worker-heavy organizations and multi-branch businesses.
Frequently Asked Questions
Frequently asked questions
How is it different from a traditional VPN?
VPN backhauls all traffic to HQ; FortiSASE inspects at the PoP and uses the nearest internet egress. Latency drops, MPLS costs fall, and with ZTNA access is to applications rather than to a network.
What's the relationship between FortiClient and FortiSASE?
FortiClient is the agent; FortiSASE is the cloud service. The same agent serves classic VPN, ZTNA and FortiSASE connectivity. The license is included with FortiSASE.
Are there PoPs in Türkiye?
No FortiSASE PoP in Istanbul currently; the nearest PoPs are Bucharest, Frankfurt and Sofia. Average latency from Türkiye: 25–40 ms.
What's the licensing model?
Per user, annual. SWG + CASB + ZTNA + FWaaS priced as a bundle. Typical per user ~$120–180/year.
Which SaaS products does CASB support?
Microsoft 365, Google Workspace, Salesforce, Slack, Box, Dropbox, ServiceNow and 1,000+ shadow IT apps. API CASB does both inline and out-of-band scanning.
What's the user experience like?
FortiClient runs in the background; the user behaves as if on normal internet. Latency typically rises 15–40 ms (PoP-dependent). VPN connect requirement removed.
Can it be used without FortiGate?
Yes — FortiSASE works standalone. But with FortiGate it forms a universal SASE architecture: local branches on FortiGate, hybrid workers on FortiSASE.
Which region holds the data?
EU, US, JP, AU data centers can be selected. EU is recommended for KVKK and GDPR compliance.
Is ZTNA deployment hard?
No. ZTNA applications are defined from the portal, a user group is selected, and FortiClient pulls the policy automatically. A typical ZTNA pilot goes live within a week.
Does it integrate with Microsoft Entra ID?
Yes. SAML, OIDC and SCIM integrate with Entra ID (Azure AD), Okta and Google Workspace identity providers. Works alongside MFA and Conditional Access policies.
Vendor's official product page
Opens the vendor's original technical documentation and product page in a new tab.
Fortinet — FortiSASE →From the same brand
Fortinet family — other products
FortiGate NGFW
AI-driven Next-Gen Firewall family (40F → 7081F).
DetailsFortiClient (ZTNA + EPP)
One agent for VPN, ZTNA, EDR and compliance.
DetailsFortiEDR / FortiXDR
Endpoint Detection & Response and extended detection/response.
DetailsFortiAP (Wi-Fi 6/6E/7)
Enterprise wireless access points orchestrated by FortiGate.
DetailsComparable Solutions
Similar solutions from other brands
FortiSASE licensing + deployment + support
Sora Yazılım handles licensing, deployment, training and ongoing management — all from a single team.