Technical Tip: How to bypass FortiSASE when the endpoint is on-net using Public IP

[RBA]

Description	This article describes how to bypass FortiSASE based on an On-Fabric detection rule based on the Public IP.
Scope	FortiSASE.
Solution	Endpoints which are behind these public IPs should have a standard level of on-premise security and therefore may not need to automatically connect to FortiSASE for security inspection. Go to Configuration -> Endpoints -> Profiles. Select On-Fabric rule sets. Select Create New and configure the On-Fabric detection rule. Add the Public IP of the user. The IP added in screenshot is just for illustration. Navigate to the endpoint profile and enable 'Bypass FortiSASE when endpoint is on-net'. Select the On-Fabric detection Rule which is configured with the Public IP.