Agentless means both behind thin edge, and SWG users, and in either of
these cases, SPA done through an SD-WAN connector with a FortiGate, is
possible. You can see in the SASE interface that SWG policies also have
an SPA section. So you *CAN* have a ...