Fortinet black logo

CLI Reference

config casb user-activity

config casb user-activity

Configure CASB user activity.

config casb user-activity
    Description: Configure CASB user activity.
    edit <name>
        set application {string}
        set casb-name {string}
        set category [activity-control|tenant-control|...]
        config control-options
            Description: CASB control options.
            edit <name>
                set status [enable|disable]
                config operations
                    Description: CASB control option operations.
                    edit <name>
                        set target [header|path]
                        set action [append|prepend|...]
                        set direction {option}
                        set header-name {string}
                        set search-pattern [simple|substr|...]
                        set search-key {string}
                        set case-sensitive [enable|disable]
                        set value-from-input [enable|disable]
                        set values <value1>, <value2>, ...
                    next
                end
            next
        end
        set description {string}
        config match
            Description: CASB user activity match rules.
            edit <id>
                set strategy [and|or]
                config rules
                    Description: CASB user activity rules.
                    edit <id>
                        set type [domains|host|...]
                        set domains <domain1>, <domain2>, ...
                        set methods <method1>, <method2>, ...
                        set match-pattern [simple|substr|...]
                        set match-value {string}
                        set header-name {string}
                        set case-sensitive [enable|disable]
                        set negate [enable|disable]
                    next
                end
            next
        end
        set match-strategy [and|or]
        set status [enable|disable]
        set type [built-in|customized]
        set uuid {string}
    next
end

config casb user-activity

Parameter

Description

Type

Size

Default

application

CASB SaaS application name.

string

Maximum length: 79

casb-name

CASB user activity signature name.

string

Maximum length: 79

category

CASB user activity category.

option

-

activity-control

Option

Description

activity-control

Activity control.

tenant-control

Tenant control.

domain-control

Domain control.

safe-search-control

Safe search control.

other

User customized category.

description

CASB user activity description.

string

Maximum length: 63

match-strategy

CASB user activity match strategy.

option

-

or

Option

Description

and

Match user activity using a logical AND operator.

or

Match user activity using a logical OR operator.

name

CASB user activity name.

string

Maximum length: 79

status

CASB user activity status.

option

-

enable

Option

Description

enable

Enable setting.

disable

Disable setting.

type

CASB user activity type.

option

-

customized

Option

Description

built-in

Built-in CASB user-activity.

customized

User customized CASB user-activity.

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

string

Maximum length: 36

config control-options

Parameter

Description

Type

Size

Default

name

CASB control option name.

string

Maximum length: 79

status

CASB control option status.

option

-

enable

Option

Description

enable

Enable setting.

disable

Disable setting.

config operations

Parameter

Description

Type

Size

Default

name

CASB control option operation name.

string

Maximum length: 79

target

CASB operation target.

option

-

header

Option

Description

header

Header.

path

Path.

action

CASB operation action.

option

-

append

Option

Description

append

Append the values after the target.

prepend

Prepend the values before the target.

replace

Replace the target by the value.

new

Create a new header regardless if existing header is found or not.

new-on-not-found

Create new header only if existing HTTP header is not found.

delete

Delete the target.

direction

CASB operation direction.

option

-

request

Option

Description

request

Request.

header-name

CASB operation header name to search.

string

Maximum length: 255

search-pattern

CASB operation search pattern.

option

-

simple

Option

Description

simple

Exact string match pattern.

substr

Sub-string pattern.

regexp

Regular expression pattern.

search-key

CASB operation key to search.

string

Maximum length: 1023

case-sensitive

CASB operation search case sensitive.

option

-

disable

Option

Description

enable

Enable case sensitive search.

disable

Disable case sensitive search.

value-from-input

Enable/disable value from user input.

option

-

disable

Option

Description

enable

Enable value from input.

disable

Disable value from input.

values <value>

CASB operation new values.

Operation value.

string

Maximum length: 79

config match

Parameter

Description

Type

Size

Default

id

CASB user activity match rules ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

strategy

CASB user activity rules strategy.

option

-

and

Option

Description

and

Match user activity using a logical AND operator.

or

Match user activity using a logical OR operator.

config rules

Parameter

Description

Type

Size

Default

id

CASB user activity rule ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

type

CASB user activity rule type.

option

-

host

Option

Description

domains

Domains.

host

Host.

path

Path.

header

HTTP header.

header-value

HTTP header and value.

method

HTTP method.

domains <domain>

CASB user activity domain list.

Domain list separated by space.

string

Maximum length: 127

methods <method>

CASB user activity method list.

User activity method.

string

Maximum length: 79

match-pattern

CASB user activity rule match pattern.

option

-

simple

Option

Description

simple

Exact string match pattern.

substr

Sub-string pattern.

regexp

Regular expression pattern.

match-value

CASB user activity rule match value.

string

Maximum length: 1023

header-name

CASB user activity rule header name.

string

Maximum length: 255

case-sensitive

CASB user activity match case sensitive.

option

-

disable

Option

Description

enable

Enable value case sensitive match.

disable

Disable value case sensitive match.

negate

Enable/disable what the matching strategy must not be.

option

-

disable

Option

Description

enable

Matching strategy is negated.

disable

Matching strategy is not negated.

config casb user-activity

Configure CASB user activity.

config casb user-activity
    Description: Configure CASB user activity.
    edit <name>
        set application {string}
        set casb-name {string}
        set category [activity-control|tenant-control|...]
        config control-options
            Description: CASB control options.
            edit <name>
                set status [enable|disable]
                config operations
                    Description: CASB control option operations.
                    edit <name>
                        set target [header|path]
                        set action [append|prepend|...]
                        set direction {option}
                        set header-name {string}
                        set search-pattern [simple|substr|...]
                        set search-key {string}
                        set case-sensitive [enable|disable]
                        set value-from-input [enable|disable]
                        set values <value1>, <value2>, ...
                    next
                end
            next
        end
        set description {string}
        config match
            Description: CASB user activity match rules.
            edit <id>
                set strategy [and|or]
                config rules
                    Description: CASB user activity rules.
                    edit <id>
                        set type [domains|host|...]
                        set domains <domain1>, <domain2>, ...
                        set methods <method1>, <method2>, ...
                        set match-pattern [simple|substr|...]
                        set match-value {string}
                        set header-name {string}
                        set case-sensitive [enable|disable]
                        set negate [enable|disable]
                    next
                end
            next
        end
        set match-strategy [and|or]
        set status [enable|disable]
        set type [built-in|customized]
        set uuid {string}
    next
end

config casb user-activity

Parameter

Description

Type

Size

Default

application

CASB SaaS application name.

string

Maximum length: 79

casb-name

CASB user activity signature name.

string

Maximum length: 79

category

CASB user activity category.

option

-

activity-control

Option

Description

activity-control

Activity control.

tenant-control

Tenant control.

domain-control

Domain control.

safe-search-control

Safe search control.

other

User customized category.

description

CASB user activity description.

string

Maximum length: 63

match-strategy

CASB user activity match strategy.

option

-

or

Option

Description

and

Match user activity using a logical AND operator.

or

Match user activity using a logical OR operator.

name

CASB user activity name.

string

Maximum length: 79

status

CASB user activity status.

option

-

enable

Option

Description

enable

Enable setting.

disable

Disable setting.

type

CASB user activity type.

option

-

customized

Option

Description

built-in

Built-in CASB user-activity.

customized

User customized CASB user-activity.

uuid

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

string

Maximum length: 36

config control-options

Parameter

Description

Type

Size

Default

name

CASB control option name.

string

Maximum length: 79

status

CASB control option status.

option

-

enable

Option

Description

enable

Enable setting.

disable

Disable setting.

config operations

Parameter

Description

Type

Size

Default

name

CASB control option operation name.

string

Maximum length: 79

target

CASB operation target.

option

-

header

Option

Description

header

Header.

path

Path.

action

CASB operation action.

option

-

append

Option

Description

append

Append the values after the target.

prepend

Prepend the values before the target.

replace

Replace the target by the value.

new

Create a new header regardless if existing header is found or not.

new-on-not-found

Create new header only if existing HTTP header is not found.

delete

Delete the target.

direction

CASB operation direction.

option

-

request

Option

Description

request

Request.

header-name

CASB operation header name to search.

string

Maximum length: 255

search-pattern

CASB operation search pattern.

option

-

simple

Option

Description

simple

Exact string match pattern.

substr

Sub-string pattern.

regexp

Regular expression pattern.

search-key

CASB operation key to search.

string

Maximum length: 1023

case-sensitive

CASB operation search case sensitive.

option

-

disable

Option

Description

enable

Enable case sensitive search.

disable

Disable case sensitive search.

value-from-input

Enable/disable value from user input.

option

-

disable

Option

Description

enable

Enable value from input.

disable

Disable value from input.

values <value>

CASB operation new values.

Operation value.

string

Maximum length: 79

config match

Parameter

Description

Type

Size

Default

id

CASB user activity match rules ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

strategy

CASB user activity rules strategy.

option

-

and

Option

Description

and

Match user activity using a logical AND operator.

or

Match user activity using a logical OR operator.

config rules

Parameter

Description

Type

Size

Default

id

CASB user activity rule ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

type

CASB user activity rule type.

option

-

host

Option

Description

domains

Domains.

host

Host.

path

Path.

header

HTTP header.

header-value

HTTP header and value.

method

HTTP method.

domains <domain>

CASB user activity domain list.

Domain list separated by space.

string

Maximum length: 127

methods <method>

CASB user activity method list.

User activity method.

string

Maximum length: 79

match-pattern

CASB user activity rule match pattern.

option

-

simple

Option

Description

simple

Exact string match pattern.

substr

Sub-string pattern.

regexp

Regular expression pattern.

match-value

CASB user activity rule match value.

string

Maximum length: 1023

header-name

CASB user activity rule header name.

string

Maximum length: 255

case-sensitive

CASB user activity match case sensitive.

option

-

disable

Option

Description

enable

Enable value case sensitive match.

disable

Disable value case sensitive match.

negate

Enable/disable what the matching strategy must not be.

option

-

disable

Option

Description

enable

Matching strategy is negated.

disable

Matching strategy is not negated.