Customizing inline-CASB headers

The FortiSASE Web Filter with Inline-CASB security component can be used to customize headers when agentless (SWG) or agent-based (FortiClient) remote users are accessing SaaS applications. When configured, FortiSASE intercepts HTTP headers and can modify them for outgoing traffic as follows:

• Add to request
• Add to response
• Remove from request
• Remove from response

The process of intercepting and customizing HTTP headers is also commonly known as HTTP header insertion.

By customizing HTTP headers for FortiSASE outgoing traffic destined for SaaS applications, the Web Filter with Inline-CASB can control SaaS application behaviour. Typically, customizing headers, namely, adding to request headers for access requests to SaaS applications is used to implement restricting tenants’ access.