casb

date_range 23-May-24

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
casb {
    instance instance-name {
	 application application-name;
        domain domain-name; 
	 instance-id instnace-id;
	 tag tag-value;
	 type type;
	}    
    casb-policy policy-name {
        rules rule-name {
            match {
                  application application-name {
		        activity activity-name {
		        [param-name param-value param-name param-value]
		    }	
		    instance instance-name;
	       }
	          application-group application-group-name {
                   activity activity-name 		        		          
               }          
           
            }
            then {
	        allow;
               deny;
               log-action;
            }
        }
        log-activity [ login upload download ];
        default-rule {
            deny;
            log-action;
            }    
        }
    default-policy;    
    traceoptions {
        file (file-name | files files | match match | no-world-readable | size size | world-readable);
        flag ( all | flow | memory | pfeman);
        level;
        no-remote-trace;
}

Hierarchy Level

content_copy zoom_out_map
[edit security]

Description

Configure Cloud Access Security Broker (CASB).

CASB provides visibility into the security of your cloud applications. To use CASB on your firewalls, you must configure CASB policies and apply CASB policy rules in a security policy.

Options

instance `instance-name`	CASB instance name. Configure CASB instance with application, instance ID, domain, and type. Creating instances for SaaS applications ensures controlled access, data security, and differentiation between corporate and non-corporate usage.
casb-policy`policy-name`	CASB policy name. Configure CASB policies to control specific actions on each cloud application.
default-policy `policy-name`	The default CASB policy that defines the actions the device takes on a packet that does not match any user-defined policy. You must set up a default CASB policy for the unified policy configuration. This default policy applies to the session until a dynamic application match occurs. Once the final application match available for the security policy, the corresponding CASB policy will be applied. If no CASB policy is explicitly configured in the final firewall policy, the CASB service disengages for the session.
traceoption	(Optional) Define tracing operations for CASB functionality.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 24.2R1.

arrow_backward PREVIOUS capture-group

NEXT arrow_forward casb-policy

Junos CLI Reference

ON THIS PAGE