Technical Tip: Unable to select Profile Groups in SWG policy in FortiSASE
| Description | This article describes how, in FortiSASE, the 'Application Control With Inline-CASB' will make the security profile invisible in the SWG policy. |
| Scope | FortiSASE. |
| Solution | When creating an SWG policy in FortiSASE, the Security profile may be missing due to the 'Application Control With Inline-CASB' settings:
The 'Application Control With Inline-CASB' profile contains a 'Proxy. HTTP' in the 'Proxy' category that cannot be blocked in the SWG policy.
The only option to apply in SWG policy is to select 'Allow' or 'Monitor' for 'Proxy'.
Once the SWG policy is deployed with such a security profile, the 'Application Control With Inline-CASB' 'Proxy' can not be blocked.
A separate SWG security profile is recommended to avoid conflicting with the SIA security profile. |
