ZTNA

Question 1

ZTNA

Answer 1

FortiClient and EMS to validate endpoints using basically a reverse proxy to grant secure external access to internal resources.

Question 2

ZTNA Validation

Answer 2

• FortiClient uses EMS to validates if endpoint is safe.
• EMS generates a dyn certificate and send tags to the forticlient.
• ZTNA Policies on FGT granting access to that specific TAG.
  Obs: FortiGate has a fabric connection with EMS. So EMS can provide FGT with devices within that specific tag.