For securing FortiSASE remote user access to private TCP-based and UDP-based applications, FortiSASE supports secure private access (SPA) using SD-WAN using a next-generation firewall converted to a standalone FortiSASE SPA hub.