What is the maximum number of Secure Private Access (SPA) service connections (SPA hubs) supported...

In recent versions of FortiSASE (starting from version 24.4 and later), the platform has increased its scalability to support larger enterprise environments.

Maximum Hub Support : According to the FortiSASE Mature Administration Guide and the FortiSASE 25.3.148 Feature Release Notes , administrators can now configure a maximum of 12 SPA Service Connections (SPA hubs) . Previously, this limit was restricted to 4 hubs.

Scalability for Large Enterprises : This enhancement allows organizations with complex, geographically dispersed networks—such as those with multiple regional datacenters or cloud hubs—to integrate up to 12 distinct FortiGate SD-WAN hubs into their SASE infrastructure.

Service Connection Licensing : Each SPA hub requires a dedicated FortiGate SPA Service Connection license . In MSSP environments using FortiCloud Organizations, a single FortiSASE instance can inherit these licenses from a root OU, supporting up to the same cumulative maximum of 12 service connections.

Routing and Performance : These 12 hubs form the " Private Access " backbone, where FortiSASE security PoPs act as spokes. The use of BGP (either per-overlay or on loopback) ensures that traffic is dynamically routed to the optimal hub based on the destination network and defined SLA priorities.