CASB SaaS application support

You can configure the FortiGate zero trust network access (ZTNA) access proxy to act as an inline cloud access security broker (CASB) by providing access control to software-as-a-service (SaaS) traffic using ZTNA access control rules. A CASB sits between users and their cloud service to enforce security policies as they access cloud-based resources. FortiOS 7.2.1 and later versions support ZTNA inline CASB for SaaS application access. This topic provides information on the supported applications.

The inline CASB database, as of version 1.00031, supports the following SaaS applications:

ZTNA access proxy application name	SaaS application
adobe	Adobe services domains
adp	ADP
atlassian	Atlassian
aws-s3	AWS S3
azure	Azure
box	Box
citrix	Citrix
confluence	Confluence
docusign	DocuSign
dropbox	Dropbox
egnyte	Egnyte
github	GitHub
gmail	Gmail
google-cloud	Google Cloud
google-drive	Google Drive
google-office	Google Office
google-web	Google Web Search domains
jira	Jira
ms-excel	Microsoft Excel
ms-exchange	Microsoft Exchange
ms-onedrive	Microsoft OneDrive
ms-outlook	Microsoft Outlook
ms-powerpoint	Microsoft PowerPoint
ms-teams	Microsoft Teams
ms-word	Microsoft Word
oracle-cloud	Oracle Cloud
salesforce	Salesforce
sap	SAP
Servicenow	ServiceNow
sharepoint	SharePoint
twilio-video-cloud	Twilio video cloud
webex	Webex
workplace	Workplace
youtube	YouTube
zendesk	Zendesk
zoom	Zoom

The inline CASB database, as of version 1.00031, supports the following SaaS access control:

ZTNA access proxy access control name	SaaS access control
box-download	Box download
box-upload	Box upload
dropbox-download	Dropbox download
dropbox-upload	Dropbox upload
gmail-getAttach	Gmail download attachment
azure	Azure
ms-onedrive-download	MS OneDrive download
ms-outlook-getAttach	MS Outlook download attachment

The inline CASB database, as of version 1.00031, supports the following SaaS application groups:

ZTNA access proxy application name	SaaS application group
MS	Microsoft SaaS

For a complete list, use the following CLI commands to retrieve the corresponding lists.

Display the list of applications:

# diagnose saas show apps

Display details of each application:

# diagnose saas show details