You are designing a new network, and the cybersecurity policy mandates that all remote users working from home must always be connected and…

The Unified FortiClient is the endpoint agent that must be installed on remote user devices. It establishes a secure connection to the FortiSASE service and enforces security policies, regardless of the user's location. This ensures that the device is always protected by redirecting traffic to FortiSASE for inspection and policy enforcement, fulfilling the "always-on" security requirement. The client's VPN capabilities, combined with policy enforcement, are central to this function.

B. SD-WAN on-ramp is a feature for connecting branch offices (thin edges) to the FortiSASE service, not for individual remote users working from home.

C. Secure web gateway (SWG) is a security feature provided by FortiSASE, not the component that facilitates the always-on connection from the endpoint.

D. Thin-branch SASE extension refers to the use case of connecting physical office locations to FortiSASE, distinct from securing individual remote users.

1. Fortinet. (2023). FortiSASE Architecture Guide. Version 23.3. "Remote User Connectivity" section. It states, "FortiSASE provides secure remote access for remote users by using the FortiClient endpoint."

2. Fortinet. (2023). FortiSASE Deployment Guide. Version 23.3. "Remote users" section. This guide details the configuration of FortiClient profiles for always-on VPN connectivity to FortiSASE.