Troubleshooting Tip：Use Globalping tool to identify the FortiSASE POP IP addresses

FortiSASE contains multiple POPs in different regions. Because of the geo-location limitation, it is challenging to identify all the POP ingress public IP addresses.

For example, pinging from Singapore:

C:\Users\user>ping turbo-******.edge.prod.fortisase.com

Pinging sslgateway-fos001-region10.prod.fortisase.com [154.52.16.7*] with 32 bytes of data:
Reply from 154.52.16.7*: bytes=32 time=147ms TTL=52

While pinging from Sydney:

C:\Users\user>ping turbo-******.edge.prod.fortisase.com

Pinging sslgateway-fos001-region15.prod.fortisase.com [154.52.22.9*] with 32 bytes of data:

Reply from 154.52.22.9*: bytes=32 time=3ms TTL=52

There is a useful tool, 'Golbalping', that can help to check all the POP IP addresses in one PC quickly

https://github.com/jsdelivr/globalping-cli?tab=readme-ov-file#installation

After installing the Golbalping, the specific source that can be selected for the Globalping:

C:\Users\user>globalping ping turbo-******.edge.prod.fortisase.com from sydney
[1;38;5;43m> Sydney, AU, OC, DigitalOcean, LLC (AS14061)[0m
PING sslgateway-fos001-region15.prod.fortisase.com (154.52.22.9*) 56(84) bytes of data.

64 bytes from 154.52.22.91 (154.52.22.9*): icmp_seq=1 ttl=55 time=1.13 ms
64 bytes from 154.52.22.91 (154.52.22.9*): icmp_seq=2 ttl=55 time=0.579 ms
64 bytes from 154.52.22.91 (154.52.22.9*): icmp_seq=3 ttl=55 time=4.39 ms

--- sslgateway-fos001-region15.prod.fortisase.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1124ms

C:\Users\tccom>globalping ping turbo-******.edge.prod.fortisase.com from singapore
[1;38;5;43m> Singapore, SG, AS, Dromatics Systems Pte Ltd (AS134677)
PING sslgateway-fos001-region10.prod.fortisase.com (154.52.16.7*) 56(84) bytes of data.
64 bytes from 154.52.16.77 (154.52.16.7*): icmp_seq=1 ttl=58 time=3.81 ms
64 bytes from 154.52.16.77 (154.52.16.7*): icmp_seq=2 ttl=58 time=2.49 ms

The Globalping also supports the below methods:

dns        Resolve DNS records, similar to the dig command
HTTP       Perform a HEAD or GET request to a host
mtr        Run a MTR test, which combines traceroute and ping
ping       Perform a ping test
traceroute Run a traceroute test

There is an alternative way that Globalping has: https://globalping.io/ supports over 400 cities that can be the source.