Lumen SASE with Fortinet
For organizations struggling to adapt and secure a hybrid workforce comprised of a growing remote workforce, Lumen® SASE with Fortinet® offers a scalable, centralized way of securing them. Rather than an isolated, cloud‑only approach, Fortinet offers SASE services as an extension of the Fortinet Security Fabric to extend and leverage the power of FortiOS—the common operating system that ties the entire portfolio of Fortinet security solutions—everywhere. Fortinet’s security‑driven networking strategy tightly integrates an organization’s network infrastructure and security architecture.
- Action Required: We need more information so we can complete your request.
- Activated: The SASE device is connected and is activation is complete.
Awaiting Access: We are waiting for an access circuit to be delivered (e.g., Dedicated Internet Access).
- CPE Return Initiated: We received your request to return the device(s) associated with this node.
Connected: After you set up the device(s) we shipped, the device connects to the SASE control network and changes the node status to Connected.
- Deleted: We completed your request to remove this node and it has been deleted.
- Delivered: The device(s) we shipped for this node were delivered to your location or Lumen gateway. Once you or your on‑site install technician set up the device(s) and they connect to the network, the status changes to Connected and we begin billing you for this node.
- Error: System error. Please contact Lumen for assistance.
- Pending Removal: We're processing your request to delete this node. Once we process your request the status changes to CPE Return Initiated.
- Provisioning: After you configure a node, the status appears as Provisioning (typically for 1–3 business days). Once we ship the device(s), the status changes to Shipped.
- Shipped: We shipped the device(s) for this node to the location you specified. Typically, it takes up to seven business days to arrive. Once the device(s) arrive, the status changes to Delivered.
Troubleshooting SD-WAN and ZTNA
Centralized management
Use Lumen Connect, FortiManager, and FortiAnalyzer for unified devices, policy, and event management. These tools provide a single-pane-of-glass for configuration, monitoring, and analytics, which is essential for rapid issue identification and resolution.
Visibility and monitoring
Leverage dashboards for real-time WAN health, application performance, and security events. Monitor SLA metrics (latency, jitter, packet loss), bandwidth usage, and application traffic to quickly pinpoint anomalies.
Common issue areas and diagnostic steps you can take
Check WAN path controller: Ensure all WAN links are active and correctly prioritized. Use SD-WAN rules to verify application steering and path selection.
SLA enforcement: Confirm SLA targets are set for critical applications. If traffic is not following the expected path, review SLA probe results and adjust thresholds as needed.
Redundancy: For sites with multiple ISPs or LTE backup, verify failover and load balancing are functioning. Use real-time metrics to validate link health.
Application awareness: Identify and prioritize business-critical apps. Check for misclassified or unidentified traffic that may affect performance.
Traffic shaping and QoS: Review traffic shaping policies and ensure bandwidth allocation aligns with business needs. Adjust as necessary for optimal performance.
Integrated security: Confirm NGFW, IPS, anti-malware, and SSL inspection are enabled and up to date.
ZTNA troubleshooting: For access issues, verify device/user identity, zero trust tags, and endpoint posture checks. Ensure FortiClient EMS and FortiManager policies are correctly applied.
Zero-touch provisioning: If onboard fails, check device registration, template assignment, and network connectivity to FortiManager. Use automation logs for error details.
Policy packages: Ensure correct policy packages are assigned and installed on devices. Use FortiManager’s workspace mode to lock and edit policies safely.
Use FortiManager: For device provisioning, policy management, template deployment, and troubleshooting configuration issues.
FortiAnalyzer: For centralized logging, reporting, and forensic analysis of security and network events.
Best practices
Automate routine tasks: Use REST APIs and automation frameworks (e.g., Ansible) for consistent, large-scale deployments and troubleshooting.
Document and escalate: Keep records of troubleshooting steps and outcomes. Escalate complex issues with detailed logs and context for faster resolution.
SASE Solutions support
- For implementation support, email us to access or schedule time with the SASE Implementation team.
- For issues with your services, create a repair ticket in Lumen Connect.
- For information about escalating SASE repair tickets, see your regional handbook.
