FortSASE builds on Fortinet\u2019s strong portfolio of security and networking tools to deliver a powerful option for secure access service edge (SASE) needs. Customers with existing Fortinet Gateways and other security products will benefit from the existing investment in appliances, configurations, and training.<\/p>\n\n\n\n
For more details, explore the following sections of this review:<\/p>\n\n\n\n
To compare FortiSASE against their competition, see our complete list of <\/em>top secure access service edge (SASE) solutions<\/em><\/a>.<\/em><\/p>\n\n\n\n Founded in 2000, Fortinet began producing physical firewall appliances and soon expanded into other security categories. More than two decades later, the company is a cybersecurity market leader<\/a> with more than $5 billion in annual revenue.<\/p>\n\n\n\n Fortinet\u2019s FortiSASE solution, recognized as a Challenger in Gartner\u2019s 2023 Magic Quadrant for Single-Vendor SASE, delivers the key SASE capabilities of:<\/p>\n\n\n\n Fortinet provides an ordering guide<\/a> for the FortiSASE product to help clients understand the types of licenses required for basic and add-on options. In summary, the client will need to consider:<\/p>\n\n\n\n Each user account and appliance subscription will provide a maximum bandwidth associated with the subscription. However, the bandwidth is pooled for the entire organization.<\/p>\n\n\n\n The basic user subscription for the FortiSASE product provides secure internet access through SSL inspection, inline antivirus, inline sandbox, intrusion prevention systems (IPS), botnet command and control protection, inline CASB, inline DLP, website filtering, and DNS address filtering.<\/p>\n\n\n\n Users may have up to 3 devices and consume up to 1.5 Mbps of bandwidth. Optional 25 Mpbs and dedicated public IP address can be purchased as well.<\/p>\n\n\n\n Installing the local device agent will add access to a cloud sandbox, vulnerability management, and endpoint protection. The agent currently supports Windows, macOS, Linux, iOS, and Android.<\/p>\n\n\n\n When neither agent-based or agentless solutions are appropriate, customers can install a Thin Branch appliance. Fortinet offers three solutions: FortiExtender (WAN extender), FortiAP (wireless access point), or FortiGate (secure LAN edge connector).<\/p>\n\n\n\n All three solutions provide the same functionality as the endpoint user agent for Secure Internet Access (SIA): SSL inspection, inline antivirus, inline sandbox, intrusion prevention systems (IPS), botnet command and control protection, inline CASB, inline DLP, website filtering, and DNS address filtering. Thin Branch solutions include 2 Mbps of bandwidth, ZTNA Agents for private applications, and secure private access agents. All devices are managed and logged by the SASE Cloud and come with 24\/7 support.<\/p>\n\n\n\n Fortinet uses physical or virtual FortiGate appliances to create Secure Private Access (SPA) and also deliver the SD-WAN capabilities for FortiSASE. SPA provides ZTNA and SD-WAN private access to on-premises and cloud applications from all supported FortiSASE connectors (agent-based, agentless, thin branch).<\/p>\n\n\n\n Fortinet publishes the types of user licenses required to implement FortiSASE and offers flexible licensing options billed annually in 1, 3, and 5-year subscriptions. Customers can contact Fortinet or their partners for specific quotes, and published Fortinet partner pricing can enable some estimates of the approximate costs:<\/p>\n\n\n\n Standard product support is included with subscriptions and provides 24\/7 FortiCare Support. Optional premium support subscriptions are also available for all appliances to provide rapid appliance replacement, onsite support, secure remote management, and advanced support engineers. Additionally, existing FortiClient (ZTNA\/VPN, EPP\/APT) subscribers can upgrade to FortiSASE for additional fees.<\/p>\n\n\n\n Buyers attracted to FortiSASE will likely seek reliable brands with established track records and the rich features to support the transition of complex existing network and security configurations. Buyers seeking similar capabilities will likely also be interested in:<\/p>\n\n\n\n FortiSASE is rated and ranked against seven other SASE competition in our top SASE providers article<\/a>. That article explains the overall ranking and here we provide details specific to FortiSASE:<\/p>\n\n\n\n FortiSASE is the only vendor with ASIC-accelerated hardware to accelerate their SASE solution and the Fortinet solution also appears to have a full range of networking and security options. Larger organizations will not be intimidated by the more complicated licensing, installation, and configuration of FortiSASE because their large teams of experts will be looking to replicate current specialized configurations.<\/p>\n\n\n\n Return on investment (ROI) will always be heavily influenced by the investment portion. Any existing investment in Fortinet appliances, configuration, and training will heavily influence the perceived value of FortiSASE.<\/p>\n\n\n\n Fortinet gateway and SD-WAN appliances offer many options for customization that take time and experience to implement correctly. Even if these hardware appliances require upgrade or replacement, trained employees will be able to make adjustments more quickly than if they also had to learn new technologies.<\/p>\n\n\n<\/a>Who is Fortinet?<\/strong><\/h2>\n\n\n\n
<\/a>FortiSASE<\/strong><\/h2>\n\n\n\n
\n
\n
FortiSASE User Subscriptions<\/h3>\n\n\n\n
FortiSASE Thin Branch Secure Internet Access<\/h3>\n\n\n\n
FortiSASE Secure Private Access<\/h3>\n\n\n\n
<\/a>Pricing & Delivery<\/strong><\/h2>\n\n\n\n
\n
\n
\n
\n
<\/a>Features<\/strong><\/h2>\n\n\n\n
\n
<\/a>Pros<\/strong><\/h2>\n\n\n\n
\n
<\/a>Cons<\/strong><\/h2>\n\n\n\n
\n
<\/a>Alternatives to FortiSASE<\/h2>\n\n\n\n
\n
<\/a>How We Evaluated FortiSASE <\/h2>\n\n\n\n
\n
<\/a>Bottom Line: Best for Fortinet Upgrades<\/h2>\n\n\n\n