You are designing a FortiSOAR hybrid multi-tenant deployment. The architecture must support remote tenant execution and automation inside segmented…

In a FortiSOAR hybrid multi-tenant deployment, the Secure Message Exchange (SME) facilitates communication between the master node and remote tenants or agents. Tenants and agents connect to the SME using AMQP over TLS on TCP port 5671. To ensure strict data isolation and security, each tenant or agent is assigned a dedicated, access-controlled space (virtual host or vhost) on the SME for message routing. Additionally, the FortiSOAR master cluster is capable of hosting shared tenants directly while maintaining strict data isolation between them.

A. The secure message exchange can be deployed as an embedded instance or a dedicated instance; a dedicated instance is not strictly mandatory for all designs.

E. FortiSOAR agents are deployed on remote segmented networks to execute actions locally, not on the master cluster for HA performance.

- Fortinet Document Library, FortiSOAR 7.3 Multi-Tenancy Guide, "Architecture and Deployment", pp. 12-15.

- Fortinet NSE 7 SOC AR 7.6 Courseware, "Multi-Tenancy and Distributed Architecture", pp. 150-152.