Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

instance (CASB)

Syntax

Hierarchy Level

Description

Configure Cloud Access Security Broker (CASB) instance.

Configuring the CASB instance with specific parameters such as the application, instance ID, domain, and type allows controlled access by differentiating between corporate and non-corporate usage of cloud applications.

Options

instance instance-name

CASB instance name.

application application-name

Application name.

domain domain-name

An email domain address.

For example, acmecorp07.com is an organization domain. Then, Box, Dropbox, Google Docs, Salesforce, Microsoft OneDrive, SharePoint, Gmail, and Slack uses the same domain for all the users.

instance-id id

Each application has a unique web address (URL) to access it. This web address includes a special identifier (such as ‘acmecorp07’) that points to a specific instance of the application.

  • Box—acmecorp07.app.box.com
  • Microsoft OneDrive or SharePoint—acmecorp07ms-my.sharepoint.com
  • Salesforce URLs—
    • acmecorp07.my.salesforce.com
    • acmecorp07.lightning.force.com
  • Slack—acmecorp-zoy8730.slack.com.

Following are generic URLs and instance ID is not applicable.

  • Dropbox—dropbox.com
  • Google Docs—docs.google.com
  • Gmail—mail.google.com
tag

Specify tag value. You can specify one of the following options:

  • Sanctioned—Application instances sanctioned by your organization.
  • Unsanctioned—Application instances unsanctioned by your organization.
type Specify type of instance. You can specify one of the following option.
  • Work

  • Personal

You must configure the type for Dropbox. For other applications, this configuration is optional.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 24.2R1.