To complete their day-to-day operations, remote users require access to a TCP-based application that is hosted on a private web server. Which…

Zero Trust Network Access (ZTNA) is the most appropriate solution for providing remote users with secure and efficient access to specific private applications. ZTNA operates on a "never trust, always verify" principle, granting access on a per-application, per-session basis after verifying user identity and device posture. This approach provides granular control and minimizes the attack surface by not granting broad network access, unlike traditional VPNs. FortiSASE leverages ZTNA to provide this exact functionality, making it the most secure and efficient method for the described use case.

A. SD-WAN private access: This is primarily designed for securing and optimizing traffic between sites (branch-to-hub), not for individual remote user access to a specific application.

B. inline-CASB: A Cloud Access Security Broker (CASB) is used to secure access to public cloud services and SaaS applications, not private applications hosted on an internal network.

D. next generation firewall (NGFW): An NGFW is a hardware or software component. While a FortiGate NGFW acts as the ZTNA gateway, ZTNA is the specific access methodology and use case, making it the more precise answer.

1. Fortinet FortiSASE Datasheet: "FortiSASE includes ZTNA for private access. ZTNA provides a better alternative to VPN by providing access per application. This allows organizations to hide applications from the internet

reducing the attack surface." This directly supports ZTNA as the solution for private application access.

2. Fortinet.com

"What is ZTNA?": "Zero Trust Network Access (ZTNA) is a category of technologies that provides secure remote access to specific applications and services to an organization’s users... ZTNA extends the principles of zero trust access to the network

removing the trust assumptions when users

devices

and applications connect." This defines ZTNA's role for secure

specific application access.

3. FortiSASE Architecture Guide 24.1

"Secure Private Access": "FortiSASE Secure Private Access provides ZTNA to applications hosted in the private datacenter or private cloud... The FortiSASE ZTNA solution consists of the FortiClient endpoint

FortiSASE PoPs

and a FortiGate ZTNA access proxy in front of the application." This document explicitly details the FortiSASE architecture for ZTNA-based private access.