Overview

Fortra CASB is a cloud security broker that sits between your employees and the cloud applications they use — such as Google Drive, Microsoft 365, or Dropbox — to provide visibility, risk management, and data control. It helps organizations enforce security policies, prevent risky behavior, and govern unsanctioned app usage, thereby safeguarding sensitive corporate data across cloud environments.

Features and Capabilities

• Visibility & Governance:
  • Auto‑discovery of cloud applications (including shadow IT) to provide insight into which apps are used and by whom.
  • Distinguishes between corporate and personal apps to apply precise policies.
  • Cloud governance and risk assessment to evaluate the security posture of cloud resources.
• Data Loss Prevention (DLP):
  • Granular control over sharing rights (public, external, internal) to minimize leakage of sensitive files.
  • Multi-layered email protection: masking, encryption of attachments, removal of unauthorized recipients.
  • Inspection of data at rest and in motion, plus data classification to understand risk.
• Threat Prevention & Behavior Analytics:
  • Detects risky behavior such as logins from untrusted devices or unusual locations.
  • Monitors for insider threats using user and entity behavior analytics (UEBA).
  • Malware detection and remediation capability.
• Access Control & Zero Trust:
  • Contextual and adaptive access policies (e.g., based on device, location) for Zero Trust enforcement.
  • Integration with SSO / IAM systems for identity-based controls.
• Security Posture & Compliance:
  • Configuration auditing to check cloud misconfigurations and enforce compliance.
  • Policy enforcement for cloud security, bridging on-premise policies to cloud environments.
  • Supports compliance with regulatory standards by enforcing data protection policies in the cloud.
• Deployment Models:
  • API‑based control: for deep visibility with minimal disruption.
  • Proxy‑based (reverse or forward): enables inline enforcement for unmanaged devices.
• Integration with Fortra Platform:
  • Part of Fortra’s broader Secure Service Edge (SSE) strategy, integrated with ZTNA and Secure Web Gateway (SWG) to provide unified cloud security.
  • Works in tandem with Fortra’s Data Security Posture Management (DSPM) for posture visibility.
• Interactive Demo & Scanning:
  • Provides a self‑guided demo to assess data risk, discover cloud apps, and simulate policy enforcement.
  • Scanning capabilities include detection of zero-day malware, API tokens, bearer tokens, and risky sharing.