FortiSASE SPA supports client-to-server traffic from remote agent users and edge devices to SPA hubs or the networks behind them, and supports server-to-client traffic from SPA hubs or their connected private networks to remote agent users. Therefore, agent-based users and thin branches/branch on-ramps can access private resources behind Fortinet SD-WAN, and private resources can initiate traffic to FortiSASE agent-based users. Internet-bound traffic is a Secure Internet Access use case, not a Secure Private Access flow; private-resource-to-private-resource SPA traffic is not a generally supported SPA flow.
Community Discussion