FortiSASE SPA Design Question

[Flamby]

Hi everyone,

I would like your input about a design discussed with my technical manager.

We have 2 on-prem Fortigates inlcuding SPA licences with each (part numbers used FC2-10-FGVVS-662-02-12 and FC-10-0400F-662-02-12), one is a VM hosted in the cloud, the other is a FG-400F in the HQ.

My question is, is it possible to make FortiSASE as a central point of security enforcement between both sites, knowing that the HQ doesn't host anything, the users will basically access cloud resources hosted behind the virtual FG. remote users will have accounts in fortiSASE directly.

I'm wondering if this setup is valid, if not, doesn't require anything special in terms of licensing ?

Might be helpful to include FortiSASE licenses here:

Enhanced Support Premium
Telephone Support Premium
FortiTrust ZTNA & CASB (users)
FortiTrust ZTNA, EPP & CASB (users)
FortiTrust SASE & CASB (users)
FortiTrust Forensic Analysis Service

Thank you in advance

[bokilmo8]

If you’re a super big or critical account where sales teams can mint your corporates money, they would happily provision a demo instance for you. Otherwise the partner you’re working with or regional distri can get a NFR instance up and running for a very small amount, this usually for 50 users

[Flamby]

Hi,

I just wanted to know, from a design perspective, if this is going to work the way I described it (a central point of transit and security enforcement between 2 sites)

Thank you for your input