Configuring an inline CASB profile
Use an inline CASB security profile to enable granular control over SaaS applications in firewall policies.
To create or edit an inline CASB profile:
-
Go to Security > Firewall Objects.
-
Select Inline CASB from the Security Profiles dropdown.
-
Click Create or select an existing profile from the list and click Edit.
-
Enter a Name for the profile.
-
Optionally, enter Comments.
-
In SaaS Applications, click Create and enter the following information:
Settings Guidelines Application
Select the SaaS Application. Privilege Control
Specify the action to take for each available application activity.
Custom Control
Optionally, Configure custom controls for this application as needed. See Creating custom application controls.
-
Click Save.
-
Enter other SaaS Applications as needed and then click Save.
Creating custom application controls
Create custom controls to perform actions on applications that are not defined by default.
To create a custom control for an application:
-
In Custom Control, click Create.
-
Configure the following settings:
Settings Guidelines Name
Enter a name for this control. Apply when HTTP packet matches
Select from the matching method from the following:
-
All of the following.
-
Any of the following.
URL Domain
Enable or disable matching on the domain the URL, then enter the domain.
URL Path
Enable or disable matching on the URL path, then enter the path.
Headers
Enable or disable matching on the headers, then enter the headers.
Header Value
Enable or disable matching on a header value, then enter the value.
-
-
In Application-Defined Controls, click Create and enter the following information:
Settings Guidelines Name
Enter a name for this control action. Control type
Select from the matching method from the following:
- Body.
- Edit URL path.
- Manipulate HTTP headers.
URL Domain
Enable or disable matching on the domain the URL, then enter the domain.
URL Path
Enable or disable matching on the URL path, then enter the path.
Headers
Enable or disable matching on the headers, then enter the headers.
Header name
Enter the header name to change.
This option is only available when Control Type is Manipulate HTTP headers.
Header Value
Enter the header value.
This option is only available when Control Type is Body or Manipulate HTTP headers.
Action
Select the path or header edit action.
This option is only available when Control Type is Edit URL path or Manipulate HTTP headers.
Path
Enter the path to modify.
Value
Enter the new value.
-
Click Save.
-
Enter any additional Application-Defined Controls as needed, then click Save.