Onboard Discovered Enterprise Applications
You must onboard discovered enterprise applications to enforce granular data protection and malware policies on the users who access these discovered applications.
Once you discover enterprise applications, you can onboard only HTTPS, SSH, and RDP applications.
- In the Management Console, select Discover > Enterprise App Discovery.
- On the Discovered Applications tab, select the domain name of the enterprise application.
- Click Onboard to open a basic view of App Management in a new browser tab.
-
Enter a name that contains:
- Only alphanumeric characters.
- Underscores instead of spaces.
- (Optional) Enter a Description.
- Click Next.
-
In the Protection Mode section, enable these toggles:
- App Authentication
- App Access
- Click Next.
-
In the App Type prompt, select the type of application where you want to enforce security controls.
Example: If you want to enforce app authentication and app access policies for browser-based remote desktop sessions, select RDP (Remote Desktop Protocol).
- HTTPS (HTTP Secure): For accessing internal private portals. Example: Internal HR portal.
- SSH (Secure Shell): For connecting to private applications or servers using SSH sessions in the Secure Cloud Workspace.
- RDP (Remote Desktop Protocol): For connecting to private applications or servers using RDP sessions in the Secure Cloud Workspace.
-
Select one of these options based on the type of private application you want to access:
- Restricted IP Addresses: Enter one or more allowed IP addresses, separating each address with a comma. Click Save.
- (Optional) Specific Domains: Enter one or more specific domains used with the application, separating each with a comma. Click Save.
- TCP Ports: Enter one or more TCP port numbers where the application runs, separating each with a comma. Click Save.
- Home Page URL: Enter the home page URL of the on-premises private application. This URL applies only to the HTTPS app type. Examples:
- Internal HR portal of an organization.
- On-premises Jira server.
- Add the users who are authorized to access the private app, then click Next.
-
In the User Access section, click New.
Note Using this option, you can control displaying the app icon in the Secure Cloud Workspace user portal. This does not restrict application access.
-
In the Type prompt, select one of these options:
- User: Select All to allow access to all users, or Selected to allow access by users you specify by their valid email addresses, then click Save. Click Add.
-
User Group: Choose the user groups from the directories listed, then click Save. Click
Add.
- Click Next, and click Save in the summary.
- Select Administration > App Management.
- Locate the onboarded application and click the Edit icon.
- In the Environment section, select the Secure Private Access environment and click Save.
-
In the Keys section, click Request New Key to encrypt content as part of the App Access protection mode.
Click Save.
- Select Administration > Key Management, locate the cloud application, and click Assign.
-
Select Create a new key or Choose from existing keys, depending on your preference.
For a new key, provide the requisite details.
