FCSS_SASE_AD-23 · Question #58
A FortiSASE administrator is deploying FortiExtender as a FortiSASE LAN extension. While configuring the internet access policy with a source scope edge device, the option to add security posture…
The correct answer is D. Edge device deployment does not support security posture (ZTNA) tags. ZTNA tags are only applicable to endpoint-based deployments where FortiClient can assess device posture. Since FortiExtender functions as an edge device (network-based), posture-based tagging is not supported, and thus the option is not available in the policy configuration.
Question
A FortiSASE administrator is deploying FortiExtender as a FortiSASE LAN extension. While configuring the internet access policy with a source scope edge device, the option to add security posture (ZTNA) tags is not available. What is preventing the administrator from enabling this functionality?
Options
- AFortiExtender needs an additional license to support ZTNA.
- BNo security posture (ZTNA) tags are configured on FortiSASE.
- CFortiExtender needs to be added on FortiSASE as an access proxy.
- DEdge device deployment does not support security posture (ZTNA) tags.
How the community answered
(31 responses)- A3% (1)
- B16% (5)
- C6% (2)
- D74% (23)
Explanation
ZTNA tags are only applicable to endpoint-based deployments where FortiClient can assess device posture. Since FortiExtender functions as an edge device (network-based), posture-based tagging is not supported, and thus the option is not available in the policy configuration.
Topics
Community Discussion
No community discussion yet for this question.