Satish Madiraju, Sr.

Director of Products – SASE

Alexandra Mehat, Director of Product Marketing
Agenda
01 Market trends

02 Challenges

03 Single-Vendor SASE Explained

04 Fortinet SASE Overview

05 Key Use cases

06 Business Outcomes

07 Demo

© Fortinet Inc. All Rights Reserved. 2

 Market Trends driving SASE adoption

Hybrid workforce From VPN to ZTNA

94% of organizations are By 2025 at least 70% of new remote
allowing employees more flexibility access deployments will rely on
as to where and when they work ZTNA rather than VPN services

TRENDS
SaaS adoption
Vendor consolidation
SaaS makes up the largest share
75% of Organizations Are
of the cloud service market and
Pursuing Security Vendor
more than 50% of the overall
Consolidation in 2022
software market

https://www.gartner.com/en/human-resources/trends/how-organizations-are-supporting-a-hybrid-workforce
https://www.gartner.com/en/newsroom/press-releases/2022-10-13-gartner-identifies-three-factors-influencing-growth-i#
https://www.gartner.com/en/digital-markets/insights/saas-growth-strategy
https://www.gartner.com/en/newsroom/press-releases/2022-09-12-gartner-survey-shows-seventy-five-percent-of-organizations-are-pursuing-security-vendor-consolidation-in-2022

© Fortinet Inc. All Rights Reserved. 3

What is SASE (Secure Access Service Edge)?
Cloud-delivered network and security convergence solution for work-from-anywhere

Networking Cloud-delivered Security

FWaaS/SWG
—
SASE SD-WAN ZTNA
—
CASB

Secure Service Edge

(SSE)

© Fortinet Inc. All Rights Reserved. 4

Convergence of On-Prem and Remote Users Network

Single-vendor
SASE Benefits
Single-
Vendor SASE • Improved risk posture
On-prem Remote Users
Simplicity and reduced security gaps
NGFW Cloud-Delivered
Consistent Security Security • Provide simplicity
SD-WAN
Better User eliminating multiple products
Experience • Efficient operations
with single agent
• Cost savings from product
and vendor reduction

© Fortinet Inc. All Rights Reserved. 5

Pragmatic Journey to SASE
With Fortinet’s convergence of security and networking everywhere

1 2 3
Secure Edge Optimize Application Secure
Connectivity Experience Remote Users

NGFW SD-WAN SASE

© Fortinet Inc. All Rights Reserved. 6

 Secure SD-WAN : Flexible Application Steering at Edge
Internet SaaS Public Cloud Data Center Edge Compute

Network Firewall Network Firewall Network Firewall

Convergence Consistent
Security

SD
WAN
• Network Firewall • Application Aware
• Secure SD-WAN • Intrusion Prevention
• SD-Branch • Web Filtering
• DNS Protection
• Sandboxing
SD-Branch • In-Line Sandboxing
• In-Line CASB
• OT and IoT Security

Campus Branch Factory

On-premises Users

© Fortinet Inc. All Rights Reserved. 7

 Secure Remote Access – Securely connect remote users
Internet SaaS Public Cloud Data Center Edge Compute

Network Firewall Network Firewall Network Firewall

Convergence Consistent
Security

Security SD
Services
Edge
WAN
• Network Firewall • Application Aware
• Secure SD-WAN • Intrusion Prevention
• SD-Branch • Web Filtering
• Security Services Edge • DNS Protection
• Sandboxing
SD-Branch
• In-Line Sandboxing
• In-Line CASB
• OT and IoT Security

Travel Home Campus Branch Factory

Remote Users On-premises Users

© Fortinet Inc. All Rights Reserved. 8

 Universal ZTNA – Secure user access to applications
Internet SaaS Public Cloud Data Center Edge Compute

Network Firewall Network Firewall Network Firewall

Convergence Consistent
Security

Security SD
Services
Edge
WAN
• Network Firewall • Application Aware
• Secure SD-WAN • Intrusion Prevention
• SD-Branch • Web Filtering
• Security Services Edge • DNS Protection
• Universal ZTNA • Sandboxing
SD-Branch
• In-Line Sandboxing
• Network Access
Control (NAC)
• OT and IoT Security
Travel Home Campus Branch Factory

Remote Users On-premises Users

© Fortinet Inc. All Rights Reserved. 9

 Single Vendor SASE
Converging Remote Users and On-Premises Network
Internet SaaS Public Cloud Data Center Edge Compute

Network Firewall Network Firewall Network Firewall

Convergence Consistent
Security

Secure SD
Services
Edge WAN
• Network Firewall • Application Aware
• Secure SD-WAN • Intrusion Prevention
• SD-Branch • Web Filtering
• Security Services Edge • DNS Protection
• Universal ZTNA • Sandboxing
SD-Branch
• In-Line Sandboxing
• Network Access
Control (NAC)
• OT and IoT Security
Travel Home Campus Branch Factory

© Fortinet Inc. All Rights Reserved. 10

Key Customer Initiatives for SASE

Branch
Transformation
Router Secure SD-WAN

Proxy
Replacement
On-prem proxy Cloud proxy

Secure Remote
Access
SASE
Legacy VPN Zero-trust

© Fortinet Inc. All Rights Reserved. 11

Fortinet Single-Vendor SASE Solution
Cloud-delivered security with AI-powered security services for work-from-anywhere

Securing Remote Users Cloud-delivered Security & Networking Improved User Experience

Secure SaaS Access

FortiClient Unified Agent

Cloud CASB
Managed Sa
aS
Thin Edge
SWG Secure Internet Access

Web
FortiExtender te
iva
FWaaS
Pr App

Secure Edges
SD-WAN Secure Private Access
AI-Powered
Security
ZTNA
Data Center
FortiGate SD-WAN

© Fortinet Inc. All Rights Reserved. 12

Simple User based Licensing with Unified Agent

FWaaS & SWG: L3-7 Firewalling, URL-Filtering, Anti-Malware

ZTNA : Cloud-Provisioned, Device Posture checking, Continuous assessment

CASB : In-line CASB and API-Based for Managed and unmanaged devices
SASE Offering
Endpoint Security : EPP, Sandboxing, Vulnerability Management
Simple Turnkey Offering for
Single-vendor SASE Solution

Supports 3
Cloud Cloud 24 x 7
devices per
Logging Managed Support
user

© Fortinet Inc. All Rights Reserved. 13

USE CASE 1

Secure Internet Access for Remote Users

Internet
Safe browsing from anywhere

Malware & ransomware prevention

Continuously assess the risks and automatically
respond to counter known and unknown threats
Management Plane

Deep inspection of end-user activity

Constant inspection of web activity for threats,
SWG FWaaS even when using secured HTTPS access

Market Leading Security as a Service

Fortinet best-in-class Cloud security efficacy
Agentless Agent powered by FortiGuard Labs

FortiClient

© Fortinet Inc. All Rights Reserved. 14

Security Configuration—
One Enforcement Location
2 3

1 Simplified FOS
Security from
1
single pane

2 Default profiles
available for fast
consumption
z

3 Web and Private

App visibility
4
4 Security profiles
can be customized

© Fortinet Inc. All Rights Reserved. 15

USE CASE 2

Flexible Secure Private Access

Internet
Apps Secure corporate app access
DCs/Cloud

FGT Secure Cloud & datacenter app access

Anywhere secure access to corporate apps
Management
for asset protection and compliance
Plane

Apps
ZTNA SD-WAN
HQs/Branches Highly granular Access Control
FGT
Context-based zero-trust access enforcement,
app based and adaptive with AI/ML
SWG FWaaS

On-prem SD-WAN integration

Superior user experience with full integration
Agentless Agent with Fortinet SD-WAN architecture

FortiClient

© Fortinet Inc. All Rights Reserved. 16

Secure Private Access With Natively Integrated ZTNA

Private
Apps Enabling Universal ZTNA
DCs/Cloud

App Gateway
Cloud provisioned
ZTNA connections
FWaaS Management
Plane
Private
Apps Device attributes, user info,
posture-based security
HQs/Branches
SWG ZTNA
App Gateway
Granular per-session
posture checks

Continuous posture
Agent re-assessment

FortiClient

© Fortinet Inc. All Rights Reserved. 17

Cloud-delivered SD-WAN Integration With SSE

Private
Apps
SD-WAN Private Access
Data Center
c
se
IP
Management
Plane
Augment to existing SD-WAN

ZTNA SD-WAN
IPse
c
Private
Apps Intelligent routing & steering
SWG FWaaS
Data Center

Broader app support

(UDP-based VoIP, video, UC)

Agent

FortiClient

© Fortinet Inc. All Rights Reserved. 18

FortiSASE SPA
Bridge to securely connect remote users to their private applications

SD-WAN
Datacenters

Available
PoPs

Remote
User

© Fortinet Inc. All Rights Reserved. 19

USE CASE 3

Secure SaaS Access for Visibility and Control

Internet Secure Access to Cloud apps and files

Cloud App Access Control

API-CASB
Safe Cloud Application access and blocking
of malicious apps with in-line CASB feature

IL-CASB Management
Plane

Deep control & view of apps content

Control over app content and files with API-based
FWaaS CASB for enhanced security and threat detection
SWG

Unified agent for anywhere detection

FortiClient Agent covers all the use-cases
Agentless Agent from SASE, Zero-trust, SaaS security,
and End-Point Protection
FortiClient

© Fortinet Inc. All Rights Reserved. 20

CASB: Provides Protection for Your SaaS applications

• Application status
• Activity history
• Risk statistics
• Highest risk users, files,
triggered policies & countries
• Risk/usage trends
• Tenant Access Control

© Fortinet Inc. All Rights Reserved. 21

Gartner Recognizes Fortinet as Single-Vendor SASE

© Fortinet Inc. All Rights Reserved. 22

Large School District: Secure Remote Learning from anywhere
Delivering consistent security and superior user experience for users everywhere

WHY FORTINET:
• Consistent security for students both on-campus & off-campus
• Agentless deployment for Chrome books
Key Customer Benefits:
• Protect existing SD-WAN investments and allowing futureproofing • Secure Access to corporate
• Superior User Experience and Operational Efficiency applications
• Deep SSL inspection without compromising on performance • Flexible Security – on-prem
or in cloud
• 5x faster user onboarding
30,000+ Students
FORTINET SOLUTION: • Superior User experience
School District in NA • FortiSASE
• Secure SD-WAN
• FortiGuard AI-Powered Security Services
• FortiClient

© Fortinet Inc. All Rights Reserved. 23

Key Business Outcomes With Fortinet SASE

Consistent Better User Operational

Security Posture Experience Efficiency

Overcome security gaps Intelligent steering and Consolidate point products with
and minimize the attack surface dynamic routing via Single-Vendor SASE approach
with AI-powered security Cloud-Delivered SD-WAN and shift to OPEX based model

© Fortinet Inc. All Rights Reserved. 24

FortiSASE - The Fortinet Advantage

Secure Adaptive Simple Efficient

Users Context-based Single agent Best-in-class

— security — —
Endpoints — Configuration High performance
— AI-powered threat — —
Applications detection Management Integration

© Fortinet Inc. All Rights Reserved. 25