FortiSASE
FortiSASE delivers both a consistent security posture and an optimal user experience for users working from anywhere. Secure your hybrid workforce by closing security gaps, plus simplify operations.
sbabu
Staff
Staff
Article Id 379304
Description

 

This article describes how to connect to different PoP's from end user computer for testing purpose.

 

Scope

 

FortiSASE, FortiClient.

 

Solution

 

When facing connectivity or traffic issue when connected to a nearest PoP, try to connect to a different PoP to see if issue get resolved. 

 

By following this approach, it can determine which PoP has an issue.

 

  1. Collect the list of POP's and turbo urls links by going to System -> SWG configuration.

 

SASE-PoP.png

 

  1. FortiClient VPN will always use a turbo link to get connected to the nearest PoP from the user's location. To change the PoP user need to edit the host file entry for the turbo link to the resolved IP address of the selected PoP URL.

 

Resolve the PoP URL's IP address to which the user wants to connect.

 

nslookup xxyyzz-fra-f3.edge.prod.fortisase.com

ping xxyyzz-fra-f3.edge.prod.fortisase.com

 

SASE-Pop_2.png

 

  1. Copy the URL's IP address and Turbo url link and make changes in the host file. 

 

In windows PC, open the notepad as administrator -> File -> Open -> Local disk (C) -> Windows -> System32 -> Drivers -> etc -> Hosts.

 

SASE-pop_3.png

 

Add the IP address, paste the turbo URL link, and save the changes in notepad file. 

 

  1. Now connect the VPN and verify which pop user is connected in the FortiSASE portal. 

 

SASE_pop-4.png

 

SASE-POP-5.png