Skip to main content
jez-k
New Member
Mar 23, 2026 5:28 AM UTC
Question

Can Inline CASB apply to explicit proxy

We have enabled the explicit proxy feature to forward traffic to an upstream proxy saas provider.

Is it possible to also enable the Inline CASB to work as well to help direct traffic? 

 

As an example, I want to bypass the upstream proxy for all Azure/M365 traffic and go direct rather than to our upstream proxy provider.

3 replies

Stephen_G
Staff & Editor
Staff & Editor
Mar 25, 2026 4:18 PM UTC

Hello jez-k, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

 

If anyone else has any ideas, feel free to contribute!

Regards,
Stephen_G - Fortinet Community Team
Stephen_G
Staff & Editor
Staff & Editor
Mar 27, 2026 1:12 PM UTC

Hi jez-k,

 

We're still looking to get you an answer or help. We'll respond as soon as we're able.

 

Thanks,

Stephen_G - Fortinet Community Team
summer1
Staff
Staff
Mar 30, 2026 1:35 PM UTC

Hello @jez-k 

I am assuming you must be referring to EP being enabled on FortiGate/FortiProxy. 
Unfortunately, Inline CASB cannot be leveraged to steer/route traffic, as this feature is designed to control what users can do within SaaS applications, like blocking file uploads to a personal OneDrive while allowing enterprise OneDrive, etc.. 

To bypass an upstream proxy for Azure or Microsoft 365, you can either control the traffic via Proxy-policy (FortiGate side bypass), or using appropriate PAC configuration (client-side bypass) 


Thanks,

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT