Create and Manage Application Instances

For CASB, to differentiate between corporate and non-corporate SaaS application instances, administrators need to configure access policies using the instance parameter.

To identify an instance, CASB requires the instance ID, the instance domain, and the instance type.
To monitor logs, the instance tags are used. Tags indicate whether the application instance is sanctioned by your organization.

Each application can have its own instance ID.

Table 1: Application Instance ID
Application	Example URL	Instance ID
For the following example URLs, consider a common string acmecorp07 as the instance ID within the application's SaaS URLs.
Box	acmecorp07.app.box.com acmecorp07.account.box.com	acmecorp07
GitHub	Organization name is the instance ID	acmecorp07
Google Chat	-	acmecorp07
Microsoft Teams	acmecorp07ms.sharepoint.com acmecorp07ms-my.sharepoint.com	acmecorp07ms
Salesforce	acmecopr07.my.salesforce.com acmecorp07.lightning.force.com	acmecopr07
Office365_Word	acmecorp07.onmicrosoft.com	acmecorp07
Office365_Excel	acmecorp07.onmicrosoft.com	acmecorp07
Office365_Powerpoint	acmecorp07.onmicrosoft.com	acmecorp07
Microsoft OneDrive	acmecorp07ms.sharepoint.com acmecorp07ms-my.sharepoint.com	acmecorp07ms
SharePoint	acmecorp07ms.sharepoint.com acmecorp07ms-my.sharepoint.com	acmecorp07ms
Microsft Outlook	acmecorp07ms-onmicrosoft.com	acmecorp07ms
Slack	acmecorp-zoy8730.slack.com	acmecorp-zoy8730
AmazonEFS	Instance ID is Amazon account ID	392719858104
AmazonS3	Instance ID is Amazon account ID	392719858104
Generic URLs where instance ID is not applicable
Dropbox	dropbox.com	-
Gmail	mail.google.com	-
Google Docs	docs.google.com	-
MetaMessenger	No instance
Microsoft OneDrive Personal	No instance

Create Application Instances

Select Secure Edge > Security Subscriptions > CASB > Application Instances.
The Application Instances page opens.
Click the plus icon () to create an application instance.
The Create Application Instance page.

Complete the configuration according to the following guidelines:

Table 2: Creating Application Instance Settings
Setting	Guideline
Cloud application	Select a cloud application from the list.
Name	Enter a new application instance name. For example, dropbox123. The instance name must begin with an alphanumeric character. Spaces and special characters except hyphens(-), colons(:), and periods(.) are not allowed. The maximum length is 63 characters.
Application instance ID	A unique URL to access SaaS services. Instance ID comes in packet data of all SaaS application activities, such as, upload, download, and share. You use this Instance ID to apply in the Security policies.
Login Domain	An email domain. During login activity, you get an email domain in packets, and it is part of instance. Enter the domain address. For example, acmecorp07.com is an organization domain. Then, for all users, CASB-supported cloud applications uses the same domain. Note: Domain configuration is not required for the Microsoft OneDrive Personal application.
Type	Select a value from the list to map a type with an application instance: Unclassified Work Personal Note: You must configure the type of value for Dropbox. For other applications, this configuration is optional.
Tag	Select a value from the list to tag an application instance: Untagged—Default value for the application instances that you have not tagged. Sanctioned—Application instances sanctioned by your organization. Unsanctioned—Application instances unsanctioned by your organization.

Click OK.
An application instance is created, which you can associate with a CASB profile.

Manage Application Instances

Edit—Select the instance, and then click the pencil icon ().
Delete—Select the instance, and then click the trash can icon ().

ON THIS PAGE

Create and Manage Application Instances

Create Application Instances

Manage Application Instances

See Also