Description
This article describes the key concept of the On-Fabric Detection Rule based on Public IP.
Scope
FortiSASE.
Solution
Go to Configuration -> Endpoints -> Profiles.
Select ON-fabric rule sets.
Then 'Create New' and configure the On-Fabric detection rule.
Set the Public IP of the user.
The public IP of the user can also be verified from Dashboard -> Managed Endpoints.
Now again go to the Endpoint profile and enable 'Bypass FortiSASE when endpoint is on-net' and select the On-Fabric detection Rule configured.
So once the user is on On-Prem then the endpoints behind the Public IP Mention in the On-Fabric detection Rule will not get auto-connected to the SASE VPN.
