Troubleshooting Tip: Resolving Mandatory Custom Controls in Inline-CASB Security Profile on FortiManager

[ataha]

Description	This article outlines the issue introduced in FortiManager version 7.4.6, where custom controls have become mandatory in the inline-CASB security profile configuration.
Scope	FortiManager.
Solution	In FortiManager, 7.4.6, when creating an inline-CASB security profile, configuring custom controls within a SaaS application has become mandatory. Previously it was optional, this setting now requires at least one entry to proceed. Attempting to save the profile without adding any custom controls results in the error message: 'Table must contain at least one entry.' This restriction does not apply when configuring the inline-CASB profile directly on FortiGate. Steps to Configure an Inline CASB Profile: Enable the Inline-CASB Feature. On the managed FortiGate device: Navigate to System -> Feature Visibility. Enable the Inline-CASB option under the Security Features section. Select Apply. A device reboot may be required for the feature to become visible. Create the Inline CASB Profile. In FortiManager: Navigate to Security -> Firewall Objects. From the Security Profiles dropdown, select Inline CASB. Select Create New to define a profile for a specific SaaS application. Enter a name and (optionally) a description for the profile. Define Application Details. Name: A descriptive name for the profile. Domains: Domain(s) associated with the SaaS application. Configure Controls. Tenant Controls: Under the Output Controls tab, use Create New to define access and interaction rules for different tenants. Privilege Control: Define actions based on various user activities. Custom Controls: Optional configuration of custom controls allows definition of specific actions for particular features or data patterns within the application. In FortiManager 7.4.6, configuring custom controls within a SaaS application has become mandatory. This is a known issue in 7.4.6 version has been resolved in FortiManager 7.4.7 and 7.6.2.