Technical Tip: How to select a specific POP for a FortiSASE VPN connection

[sahmed_FTNT]

Description	This article describes how to select a specific POP for a FortiSASE VPN connection
Scope	FortiSASE.
Solution	By default, it is recommended to use the Global link, as it will make sure users are connecting to the POP which has the lowest latency from the end user location. In case the end-user has a specific requirement to connect with a specific POP log in to the FortiSASE portal, navigate under System -> SWG Configuration, and copy the link of the specific POP. Copy the link for the specific POP and identify the profile assigned to the user by referring to How to identify the Profile and security ... - Fortinet Community. Navigate to the assigned profile: Configuration -> Endpoints -> Profile -> VPNs available to users. Create a new 'SSLVPN' entry add the URL add '/turbo' after the copied URL and enable the option prompt for username. Configure local users for those requiring connections to specific POPs. Note that this customized VPN doesn’t support SAML authentication as this feature is mainly designed for endpoints to connect to an on-premise FortiGate via VPN instead of FortiSASE. Related document: Configure customized VPN connection Wait for EMS synchronization. Once complete, the additional POP should appear in the VPN connection drop-down menu.