Technical Tip: FortiSASE how to connect to different PoPs from end user machine for test purpose

Description

This article describes how to connect to different PoPs from an end-user computer for testing purposes.

Scope

FortiSASE, FortiClient.

Solution

When facing connectivity or traffic issues when connected to the nearest PoP, try to connect to a different PoP to see if the issue gets resolved. 

By following this approach, it can determine which PoP has an issue.

1. Collect the list of PoPs and Turbo URLs by going to System -> SWG configuration.

Mature release:

Feature release (FortiSASE v7.4):

To find the Global Turbo FQDN of the instance, browse to Network -> Proxy configuration:

To find the Dedicated IP, browse to Operations -> Infrastructure:

2. FortiClient VPN will always use a turbo link to get connected to the nearest PoP from the user's location. To change the PoP, the user needs to edit the host file entry for the turbo link to the resolved IP address of the selected PoP URL.

Resolve the PoP URL's IP address to which the user wants to connect.

nslookup xxyyzz-fra-f3.edge.prod.fortisase.com
ping xxyyzz-fra-f3.edge.prod.fortisase.com

3. Copy the URL's IP address and Turbo URL link, and make changes in the hosts file. 

In windows PC, open Notepad as administrator -> File -> Open -> Local disk (C) -> Windows -> System32 -> Drivers -> Etc. -> Hosts.

Add the IP address, paste the Turbo URL link, and save the changes in the Notepad file. 

4. Now connect to the VPN and verify which POP user is connected in the FortiSASE portal.