Your organization is currently using FortiSASE for its cybersecurity. They have recently hired a contractor who will work from the HQ office and who…

For a contractor working within the HQ office using a personal device, installing a full VPN client is often undesirable. FortiSASE can function as an explicit web proxy, providing Secure Web Gateway (SWG) services. By configuring the contractor's browser with a Proxy Auto-Configuration (PAC) file, their web traffic can be securely directed to FortiSASE for inspection and policy enforcement without requiring an agent. This method is ideal for providing temporary, secure internet access to guest or unmanaged endpoints on a corporate network.

B. A tunnel policy is for remote access users connecting via FortiClient VPN, not for users already on the corporate network needing internet access.

C. ZTNA is designed for secure access to specific private applications, not for providing general, secure internet access.

D. A self-registration portal is for user onboarding or guest network access, but the underlying security mechanism for internet traffic would still be SWG/proxy.

Fortinet. (2024). FortiSASE Architecture Guide 24.1. "Secure Web Gateway". p. 11. This section describes agentless access using a PAC file to direct browser traffic to FortiSASE for SWG inspection.

Fortinet. (2024). FortiSASE Administration Guide 24.1. "Explicit web proxy". p. 158. This section details how to configure FortiSASE as an explicit proxy and use PAC files for client configuration.