In the FortiSASE architecture, Secure Internet Access (SIA) is the service that protects remote users and devices as they access the internet. The policies that govern this traffic, including web filtering, application control, and threat protection for internet-bound connections from FortiClient endpoints, are configured as secure web gateway (SWG) policies. These policies are the specific mechanism for controlling this traffic flow.

A. VPN policy: This term typically refers to policies for site-to-site or traditional remote access VPNs, not the specific policy type for FortiSASE's integrated internet security service.

B. thin edge policy: This policy type is used in the context of FortiSASE Secure SD-WAN Integration for traffic originating from a physical site (Thin Edge), not a remote FortiClient endpoint.

C. private access policy: This policy type is used for FortiSASE's ZTNA use case to control access to internal, private applications, not for general internet access.

1. FortiSASE 23.3 Administration Guide, "Secure Internet Access", section "Configuring security". This section details the process: "You can configure an SWG firewall policy to control network traffic for remote users."