Fortinet black logo

CLI Reference

config casb profile

config casb profile

Configure CASB profile.

config casb profile
    Description: Configure CASB profile.
    edit <name>
        config saas-application
            Description: CASB profile SaaS application.
            edit <name>
                set status [enable|disable]
                set safe-search [enable|disable]
                set safe-search-control <name1>, <name2>, ...
                set tenant-control [enable|disable]
                set tenant-control-tenants <name1>, <name2>, ...
                set domain-control [enable|disable]
                set domain-control-domains <name1>, <name2>, ...
                set log [enable|disable]
                config access-rule
                    Description: CASB profile access rule.
                    edit <name>
                        set action [bypass|block|...]
                        set bypass {option1}, {option2}, ...
                    next
                end
                config custom-control
                    Description: CASB profile custom control.
                    edit <name>
                        config option
                            Description: CASB custom control option.
                            edit <name>
                                set user-input <value1>, <value2>, ...
                            next
                        end
                    next
                end
            next
        end
    next
end

config casb profile

Parameter

Description

Type

Size

Default

name

CASB profile name.

string

Maximum length: 35

config saas-application

Parameter

Description

Type

Size

Default

name

CASB profile SaaS application name.

string

Maximum length: 79

status

Enable/disable setting.

option

-

enable

Option

Description

enable

Enable setting.

disable

Disable setting.

safe-search

Enable/disable safe search.

option

-

disable

Option

Description

enable

Enable setting.

disable

Disable setting.

safe-search-control <name>

CASB profile safe search control.

Safe search control name.

string

Maximum length: 79

tenant-control

Enable/disable tenant control.

option

-

disable

Option

Description

enable

Enable setting.

disable

Disable setting.

tenant-control-tenants <name>

CASB profile tenant control tenants.

Tenant control tenants name.

string

Maximum length: 79

domain-control

Enable/disable domain control.

option

-

disable

Option

Description

enable

Enable setting.

disable

Disable setting.

domain-control-domains <name>

CASB profile domain control domains.

Domain control domain name.

string

Maximum length: 79

log

Enable/disable log settings.

option

-

enable

Option

Description

enable

Enable log setting.

disable

Disable log setting.

config access-rule

Parameter

Description

Type

Size

Default

name

CASB access rule activity name.

string

Maximum length: 79

action

CASB access rule action.

option

-

monitor

Option

Description

bypass

Apply bypass options.

block

Block the request.

monitor

Log when log is enabled.

bypass

CASB bypass options.

option

-

Option

Description

av

Exempt from AV scanning.

dlp

Exempt from data leak prevention (DLP).

web-filter

Exempt from web filter.

file-filter

Exempt from file filter.

video-filter

Exempt from video filter.

config custom-control

Parameter

Description

Type

Size

Default

name

CASB custom control user activity name.

string

Maximum length: 79

config option

Parameter

Description

Type

Size

Default

name

CASB custom control option name.

string

Maximum length: 79

user-input <value>

CASB custom control user input.

user input value.

string

Maximum length: 79

config casb profile

Configure CASB profile.

config casb profile
    Description: Configure CASB profile.
    edit <name>
        config saas-application
            Description: CASB profile SaaS application.
            edit <name>
                set status [enable|disable]
                set safe-search [enable|disable]
                set safe-search-control <name1>, <name2>, ...
                set tenant-control [enable|disable]
                set tenant-control-tenants <name1>, <name2>, ...
                set domain-control [enable|disable]
                set domain-control-domains <name1>, <name2>, ...
                set log [enable|disable]
                config access-rule
                    Description: CASB profile access rule.
                    edit <name>
                        set action [bypass|block|...]
                        set bypass {option1}, {option2}, ...
                    next
                end
                config custom-control
                    Description: CASB profile custom control.
                    edit <name>
                        config option
                            Description: CASB custom control option.
                            edit <name>
                                set user-input <value1>, <value2>, ...
                            next
                        end
                    next
                end
            next
        end
    next
end

config casb profile

Parameter

Description

Type

Size

Default

name

CASB profile name.

string

Maximum length: 35

config saas-application

Parameter

Description

Type

Size

Default

name

CASB profile SaaS application name.

string

Maximum length: 79

status

Enable/disable setting.

option

-

enable

Option

Description

enable

Enable setting.

disable

Disable setting.

safe-search

Enable/disable safe search.

option

-

disable

Option

Description

enable

Enable setting.

disable

Disable setting.

safe-search-control <name>

CASB profile safe search control.

Safe search control name.

string

Maximum length: 79

tenant-control

Enable/disable tenant control.

option

-

disable

Option

Description

enable

Enable setting.

disable

Disable setting.

tenant-control-tenants <name>

CASB profile tenant control tenants.

Tenant control tenants name.

string

Maximum length: 79

domain-control

Enable/disable domain control.

option

-

disable

Option

Description

enable

Enable setting.

disable

Disable setting.

domain-control-domains <name>

CASB profile domain control domains.

Domain control domain name.

string

Maximum length: 79

log

Enable/disable log settings.

option

-

enable

Option

Description

enable

Enable log setting.

disable

Disable log setting.

config access-rule

Parameter

Description

Type

Size

Default

name

CASB access rule activity name.

string

Maximum length: 79

action

CASB access rule action.

option

-

monitor

Option

Description

bypass

Apply bypass options.

block

Block the request.

monitor

Log when log is enabled.

bypass

CASB bypass options.

option

-

Option

Description

av

Exempt from AV scanning.

dlp

Exempt from data leak prevention (DLP).

web-filter

Exempt from web filter.

file-filter

Exempt from file filter.

video-filter

Exempt from video filter.

config custom-control

Parameter

Description

Type

Size

Default

name

CASB custom control user activity name.

string

Maximum length: 79

config option

Parameter

Description

Type

Size

Default

name

CASB custom control option name.

string

Maximum length: 79

user-input <value>

CASB custom control user input.

user input value.

string

Maximum length: 79