My client has many SaaS apps including OneDrive, Sharepoint, and SalesForce. They would like to block access for all OOB users (internal employees and external collaborators) for their SaaS apps.
The OOB CASB documentation states that you can control access for internal employees and external collaborators, but it does not explain how. I’ve searched the Zscaler knowledge base and have gone through all the SaaS items on the ZIA portal (SaaS Security API and SaaS Application Tenants), but can’t find where you can control access for OOB users to your SaaS apps.
Does Zscaler OOB CASB allow you to control access or not?
OOB is always out of band. Not inline. For example. If there is malware or sensitive data in onedrive will be identified by dlp or malware policies and take out of band action. Its not inline. Actions will be based on the actions allowed by saas providers.