Is Perimeter 81 a real alternative to Fortinet for ZTNA?

Perimeter 81? They're an MSP's rebranded frontend for a cloud broker. Fortinet's ZTNA is just their firewall with a new coat of paint, but at least it's the same box I'm already managing.

The real question is whether you want another SaaS console or just use what's already in your rack. If you've got FortiGates, their ZTNA works. It's clunky, but it's one less vendor. Deploying the Forticlient and setting up the tags is a pain, but it's predictable.

With Perimeter 81, you're betting your internal access on their overlay. Their agent, their proxies. It's just another cloud dependency. Look at their actual architecture; it's a web of connectors and gateways. More moving parts that I don't control.

Fortinet config snippet for a ZTNA rule. This is the "boring" part:
```
config firewall policy
edit 0
set name "ztna-access-to-app"
set srcintf "ztna-ztunnel"
set dstintf "internal"
set srcaddr "ztna-tag-webservers"
set dstaddr "app-server-ip"
set action accept
set schedule "always"
set service "HTTP HTTPS"
set groups "ztna-access-tag"
next
end
```

It's not elegant, but it's in my config backup. Can you say the same for a cloud portal?