FortiSASE is a comprehensive security solution that combines SD-WAN, security, and Zero Trust Network Access (ZTNA) capabilities in a single platform. It provides secure access to applications and data from any device, anywhere, and at any time. FortiSASE offers advanced threat protection, real-time visibility, and control over network traffic, ensuring that organizations can securely connect their users and devices to the cloud and on-premises resources. With FortiSASE, organizations can simplify their security infrastructure, reduce costs, and improve their overall security posture.
The most valuable feature of Forcepoint CASB is its ease of deployment and configuration in a FortiSASE environment. It reduces the load on local routers and firewalls by processing in Fortinet's cloud infrastructure. The solution offers excellent documentation and support, making it easy for the average user to pick up. The significant benefit is managing everything from one web interface, which simplifies the process. The security is excellent, and the product is stable and scalable, making it a reliable choice.
Improvements to Forcepoint CASB include the ability to use it on endpoints without the client, which is currently on the roadmap for Q3. However, the security posture is reduced if the connection is lost. Additionally, there is a need for a clearer and more concise way to present the return on investment for customers, especially for mobile devices which are not covered enough by the solution.
Forcepoint CASB has resulted in reduced upfront purchase costs by eliminating some FortiGate firewalls and has been cost-neutral due to savings from the firewall offsetting the investment in FortiSASE. The ROI has not been explicitly calculated, but is expected to be at least cost-neutral with potential savings. The product has provided a fast time-to-value with minimal training required, resulting in almost instant results.
Users have reported that pricing for Forcepoint CASB varies depending on the user, with education users receiving discounts. However, users have found the pricing to be competitive with other products on the market.
Forcepoint CASB is used by a school board to protect students and endpoint devices both in school and at home, particularly during the COVID lockdown. The solution also provides a secure environment for board office staff working remotely, allowing them to access the board network and resources securely. Another customer uses it for achieving a unified and secure network with all of the SD1 capabilities and secure access for branches.
Some customers have found the tech support for Forcepoint CASB to be decent, with a knowledgeable and focused team that addresses issues quickly. However, there is also a review indicating that the customer has not yet used the technical support services.
The initial setup for Forcepoint CASB was described as both straightforward and complex. One reviewer stated that they were able to deploy 5,000 devices in two weeks with an in-house team of seven people, and that the solution requires no maintenance on their side. However, another reviewer overseeing the project described the setup as very complex due to the hybrid nature of the solution, with some devices being deployed on-premises and most of the solution being done on the cloud. They also mentioned that 15 to 20 people were working on the deployment of the product.
Forcepoint CASB's solution is highly scalable, allowing for easy expansion without the need for hardware changes. The cloud infrastructure processes all information, reducing the burden on local systems.
The solution's stability is excellent with no bugs or glitches and it doesn't crash or freeze.
FortiSASE combines the following key elements:
FortiSASE aims to simplify and streamline security operations by integrating multiple security functions and network services into a single platform. This approach allows organizations to reduce complexity, improve efficiency, and enhance overall security posture.
Reviews from Real Users
Peter VanDorp, Cyber Security Analyst and Network Operations Supervisor at a non-tech company, says that "Deep packet inspection is easier to deploy in the FortiSASE environment. It's much simpler to configure one-touch deployment. It was considerably more convoluted to get that to work using FortiClient. All that processing horsepower is happening in Fortinet's cloud infrastructure, reducing the load on our local routers and on-prem FortiGate firewalls."
Jose-Rivera, Account Manager at Telefónica, that FortiSASE is "Reliable with good security and helps with network optimization".