NSE5-SSE-AD-7-6: Fortinet NSE 5 - FortiSASE and SD-WAN 7.6 Core Administrator

SAML Single Sign-On (SSO) takes priority over the remaining FortiSASE user authentication methods. When SSO is enabled, other user authentication methods are not used.

FortiSASE regional-compliance rules let administrators define a country- or region-specific priority order for on-premises VPN gateways and Security PoPs. Clients attempt the listed connections in order, and an unavailable on-premises FortiGate gateway fails over to the next available configured connection, including a Security PoP.

FortiSASE remote-user authentication sources are LDAP, RADIUS, and SSO through a SAML identity provider. These sources authenticate users and can be associated with user groups to control access to FortiSASE resources.

SD-WAN member 1 is out of SLA for the configured Corp_HC health check, leaving member 2 as the only passing member. The SLA-mode rule evaluates members 1 and 2 and forwards through the eligible member; member 2 maps to port2. FortiGate SLA-mode rules select a link that satisfies the configured SLA, using the configured member preference when multiple eligible links exist.

Dedicated IPs at security points of presence provide stable egress source addresses. They support source IP address anchoring and allow geolocation-based access or policy rules to be applied consistently.