Troubleshooting Tip: Resolving Mandatory Custom Controls in Inline-CASB Security Profile on FortiManager

In FortiManager, 7.4.6, when creating an inline-CASB security profile, configuring custom controls within a SaaS application has become mandatory. Previously it was optional, this setting now requires at least one entry to proceed. Attempting to save the profile without adding any custom controls results in the error message:

'Table must contain at least one entry.'

This restriction does not apply when configuring the inline-CASB profile directly on FortiGate.

Steps to Configure an Inline CASB Profile:

1. Enable the Inline-CASB Feature.

• Navigate to System -> Feature Visibility.

• Enable the Inline-CASB option under the Security Features section.

• Select Apply. A device reboot may be required for the feature to become visible.

• Name: A descriptive name for the profile.

• Domains: Domain(s) associated with the SaaS application.

4. Configure Controls.

• Tenant Controls: Under the Output Controls tab, use Create New to define access and interaction rules for different tenants.

• Privilege Control: Define actions based on various user activities.

• Custom Controls: Optional configuration of custom controls allows definition of specific actions for particular features or data patterns within the application.

• This is a known issue in 7.4.6 version has been resolved in FortiManager 7.4.7 and 7.6.2.