CASB SaaS application support
You can configure the FortiGate zero trust network access (ZTNA) access proxy to act as an inline cloud access security broker (CASB) by providing access control to software-as-a-service (SaaS) traffic using ZTNA access control rules. A CASB sits between users and their cloud service to enforce security policies as they access cloud-based resources. FortiOS 7.2.1 and later versions support ZTNA inline CASB for SaaS application access. This topic provides information on the supported applications.
The inline CASB database, as of version 1.00031, supports the following SaaS applications:
ZTNA access proxy application name |
SaaS application |
---|---|
adobe |
Adobe services domains |
adp |
ADP |
atlassian |
Atlassian |
aws-s3 |
AWS S3 |
azure |
Azure |
box |
Box |
citrix |
Citrix |
confluence |
Confluence |
docusign |
DocuSign |
dropbox |
Dropbox |
egnyte |
Egnyte |
github |
GitHub |
gmail |
Gmail |
google-cloud |
Google Cloud |
google-drive |
Google Drive |
google-office |
Google Office |
google-web |
Google Web Search domains |
jira |
Jira |
ms-excel |
Microsoft Excel |
ms-exchange |
Microsoft Exchange |
ms-onedrive |
Microsoft OneDrive |
ms-outlook |
Microsoft Outlook |
ms-powerpoint |
Microsoft PowerPoint |
ms-teams |
Microsoft Teams |
ms-word |
Microsoft Word |
oracle-cloud |
Oracle Cloud |
salesforce |
Salesforce |
sap |
SAP |
Servicenow |
ServiceNow |
sharepoint |
SharePoint |
twilio-video-cloud |
Twilio video cloud |
webex |
Webex |
workplace |
Workplace |
youtube |
YouTube |
zendesk |
Zendesk |
zoom |
Zoom |
The inline CASB database, as of version 1.00031, supports the following SaaS access control:
ZTNA access proxy access control name |
SaaS access control |
---|---|
box-download |
Box download |
box-upload |
Box upload |
dropbox-download |
Dropbox download |
dropbox-upload |
Dropbox upload |
gmail-getAttach |
Gmail download attachment |
azure |
Azure |
ms-onedrive-download |
MS OneDrive download |
ms-outlook-getAttach |
MS Outlook download attachment |
The inline CASB database, as of version 1.00031, supports the following SaaS application groups:
ZTNA access proxy application name |
SaaS application group |
---|---|
MS | Microsoft SaaS |
For a complete list, use the following CLI commands to retrieve the corresponding lists.
Display the list of applications:
# diagnose saas show apps
Display details of each application:
# diagnose saas show details