Agentless remote user internet access is the use case that minimizes individual endpoint configuration. This model leverages a Secure Web Gateway (SWG) to which endpoint web traffic is directed, typically via a proxy auto-config (PAC) file or explicit proxy settings in the browser. This method secures web access without requiring the installation or management of a dedicated software agent (like FortiClient) on each user's device, thereby significantly reducing the configuration overhead on individual endpoints.

A. Site-based remote user internet access: This model involves configuring a network gateway (like a FortiGate) at a physical site, not individual remote user endpoints. It is not designed for individual, off-site users.

C. SIA for SSL VPN remote users: This approach requires the installation and configuration of an SSL VPN client on each endpoint, which is a significant configuration step, contradicting the goal of minimization.

D. SIA using ZTNA: A comprehensive ZTNA solution typically requires an agent (like FortiClient) on the endpoint to perform device posture checks and provide secure access to applications, which involves endpoint configuration.

1. Fortinet FortiSASE Administration Guide: In the "Secure Web Gateway" section

the documentation states

"FortiSASE secure web gateway (SWG) for remote users allows you to apply security inspections to user's web traffic without requiring them to install FortiClient." This explicitly confirms the agentless nature and minimal endpoint impact. (Reference: FortiSASE 23.3 Administration Guide

"Secure Web Gateway" chapter).

2. Fortinet FortiSASE Architecture Guide: This guide describes the various connectivity options. It contrasts agent-based access

which provides ZTNA and full SIA

with agentless access for SWG. The agentless model is presented as a "thin-client" approach that simplifies endpoint requirements by only needing browser configuration. (Reference: FortiSASE Architecture Guide

"Connectivity Options" section).

3. Fortinet FortiSASE Datasheet: The datasheet often outlines different modes of operation. It distinguishes between the full functionality provided by the FortiClient agent (ZTNA

VPN

SIA) and the agentless SWG option for securing web traffic for any user on any device without a client install. (Reference: FortiSASE Datasheet

"Use Cases" or "Features" section).