An existing Fortinet SD-WAN customer who has recently deployed FortiSASE wants to have a comprehensive view of, and combined reports for, both SD-WAN…

To achieve a unified, comprehensive view of both SD-WAN branch traffic and FortiSASE remote user traffic, administrators must configure FortiSASE to forward its logs to an external FortiAnalyzer. Since the existing SD-WAN FortiGates already send their logs to this FortiAnalyzer, centralizing the FortiSASE logs in the same external FortiAnalyzer allows for combined analytics, correlation, and reporting across the entire hybrid network infrastructure.

A: Fortinet SOCaaS is a managed security monitoring service, not a reporting platform designed for customers to generate combined SD-WAN and SASE reports.

B: FortiSASE does not ingest logs from external FortiGates; it is not designed to act as a centralized log repository for other network devices.

D: FortiSASE cannot ingest logs from an external FortiAnalyzer; the log forwarding architecture flows from FortiSASE to FortiAnalyzer, not the reverse.

1. Fortinet, Inc. "FortiSASE Administration Guide 7.x", Section: Log Forwarding to FortiAnalyzer.

2. Fortinet, Inc. "FortiSASE Architecture Guide 7.x", Section: Analytics and Reporting Integration.