Shared public IP address for multiple customers' remote user traffic

By default, remote user traffic that enters and exits a particular FortiSASE security point of presence (PoP) passes through a shared IP environment. For remote users of all FortiSASE customers that are connected to a specific security PoP, the same public IP address is used for outgoing traffic. This prevents the identification and isolation of each specific customer’s traffic.

If any remote user connected to a specific PoP generates suspicious activity, servers on the Internet may blocklist all remote users using that PoP. This is because sharing a public IP address means sharing its Internet reputation with other customers.