Which statement is true about FortiSASE supported deployment?

FortiSASE supports two primary deployment modes for routing user traffic to its Points of Presence (PoPs). Endpoint mode utilizes the FortiClient agent installed on the user's device to securely tunnel all traffic to FortiSASE, providing comprehensive security and ZTNA capabilities. Secure Web Gateway (SWG) mode is an agentless deployment that uses proxy settings or PAC files to forward only web-based traffic to FortiSASE. Administrators can choose either mode depending on their specific deployment requirements and managed vs. unmanaged device policies.

A: FortiSASE officially categorizes its primary deployment methods as Endpoint mode (using FortiClient) and SWG mode, not generically as "VPN mode and Agentless mode."

C: FortiSASE does not operate only in SWG mode; it heavily utilizes Endpoint mode (FortiClient) for comprehensive traffic routing and full feature support.

D: FortiSASE does not rely on a ZTNA-only mode; it integrates ZTNA alongside SWG and CASB functionalities rather than replacing them.

1. Fortinet, Inc. "FortiSASE Administration Guide 7.x", Section: Deployment Modes (Endpoint mode and SWG mode).

2. Fortinet, Inc. "FortiSASE Architecture Guide 7.x", Section: Traffic Forwarding Methods.