QuestionQ15Verified/FortiSASE deployment and secure accessCopy linkReport a problemAsk AstroTutorSave questionWhich two statements regarding on-ramp tunnels in FortiSASE are correct?Choose twoAOnly FortiExtender and FortiAP devices are supported for on-ramp tunnels.BThe branch on-ramp and secure private access (SPA) features share the same BGP configuration.CSSL deep inspection for site-based users is fully functional without installing the FortiSASE certificate authority certificate.DA branch device can connect to two or more on-ramp locations.Show AnswerAnswerExplanationFor FortiGate branch devices, the Branch On-ramp and Secure Private Access (SPA) features share BGP configuration. A branch device can establish connections to multiple on-ramp locations. SSL deep inspection for site-based edge-device users requires the FortiSASE CA certificate to be installed on endpoints, and Branch On-ramp supports FortiGate and third-party IPsec devices rather than only FortiExtender and FortiAP devices.Learn moreFortiSASE Branch On-ramp prerequisites and considerationsSSL deep inspection for site-based usersShow comments1Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion