Your FortiSASE customer has a small branch office in which ten users will be using their personal laptops and mobile devices to access the internet…

For a small branch office with users on personal (BYOD) devices, deploying a FortiAP is the most efficient solution for securing internet access with minimal configuration. The FortiAP can be configured to create a secure tunnel to the FortiSASE cloud. All traffic from devices connecting to the FortiAP's wireless network is automatically routed through FortiSASE for security inspection. This provides an agentless solution that is easy to deploy and manage, making it ideal for securing BYOD environments without requiring software installation on each personal device.

A. Installing the FortiClient agent on multiple personal laptops and mobile devices is not a minimal configuration and is often impractical for BYOD scenarios.

C. An SD-WAN on-ramp typically involves a FortiGate, which requires more complex configuration than a cloud-managed FortiAP, making it less suitable for this specific scenario.

D. Using a FortiGate as a LAN extension is the same concept as an SD-WAN on-ramp and is more complex to configure than a simple FortiAP deployment.

Fortinet. (2024). FortiSASE Architecture Guide 24.1. "Thin Edge > FortiAP". p. 18. This section describes how FortiAPs can be used as a thin edge to tunnel traffic from a branch office to FortiSASE, providing a simple, agentless deployment.

Fortinet. (2024). FortiSASE Administration Guide 24.1. "Secure Internet Access for Thin-Edge Branch Offices". p. 201. The guide details the configuration steps for FortiAP integration, highlighting it as a streamlined method for branch connectivity.