CASB Overview
Massive adoption of cloud services and applications has created new targets and threats like never before. What's more, the widespread use of mobile devices is the new reality that organizations regularly interact with users they don't manage. Your systems, applications, and data are constantly in contact with mobile phones, tablets, and laptops that you do not control. Manual and people-centric cloud security approaches fail in such situations. Organizations must use automation to supplement their cloud security needs.
Juniper Secure Edge provides full-stack Security Service Edge (SSE) capabilities to protect web, Software as a Service (SaaS), and on-premises applications and provide users with consistent and secure access that follows them wherever they go.
A New Solution for Cloud Security—Cloud Access Security Broker (CASB)
CASB provides visibility into the security of your cloud applications. You can create CASB profiles in the Juniper Secure Edge to apply granular controls to ensure authorized access, threat prevention, and compliance to secure your data. You can also assign rules to a CASB profile and associate the profile with a Secure Edge policy to automatically detect anomalous usage and suspicious behavior.
Table 1 lists the Juniper Secure Edge supported cloud applications and their activities.
Cloud Application |
Supported Activities |
---|---|
Group: Chat |
|
Microsoft Teams |
Login, Chat, Audio/Video, and FileTransfer |
Google Chat |
Login, Chat, Audio/Video, and FileTransfer |
Slack |
Login, Chat, Audio/Video, and FileTransfer |
Group: Cloud Storage |
|
Amazon EFS |
Upload, Download, Create, Delete, and Edit |
Amazon S3 |
Upload, Download, Create, and Delete |
Group: Email |
|
Gmail |
Login, Read, Compose, Send, UploadAttachment, and DownloadAttachment |
Microsoft Outlook |
Login, Read, Compose, Send, UploadAttachment, and DownloadAttachment |
Group: File Sharing |
|
Box |
Login, Upload, Download, and Share |
Dropbox |
Login, Upload, Download, and Share |
Google Docs |
Login, Upload, Download, and Share |
Microsoft OneDrive |
Login, Upload, Download, and Share |
Microsoft OneDrive Personal |
Login, Upload, Download, and Share |
Salesforce |
Login, Upload, Download, and Share |
SharePoint |
Login, Upload, Download, and Share |
Group: Source control |
|
GitHub |
Login, Upload, Download, Create, View, and CreateRepo |
Benefits of CASB
-
Allow only validated users to access the data that is stored in the cloud to prevent unauthorized access. Data access control provides maximum visibility and control to the security teams over SaaS applications, enhancing Juniper Secure Edge's cloud-delivered security capabilities.
-
Protect SaaS applications by granularly controlling user actions, scanning all existing and new files within SaaS applications for malware, and preventing the upload and download of compromised files.