Upload/Download GitBash CLI traffic in proxyforwarding not sending to CASB
search cancel

Upload/Download GitBash CLI traffic in proxyforwarding not sending to CASB

book

Article ID: 241999

calendar_today

Updated On:

Products

CASB Gateway CASB Security Advanced CASB Security Standard CASB Security Premium CASB Gateway Advanced

Issue/Introduction

The support for GitHub CLI has been added since 3.153 release, but if the customer still wants to bypass the CLI-based traffic from sending to CASB, this KB can help achieve this goal.

Resolution

The customer should consider isolating the GitBash CLI traffic from sending to CASB when configuring the proxy forwarding.

The proxy admin can isolate the GitBash CLI traffic from the browser-based traffic based on the user-agent tag. Below is an example of the rules that need to be added to the Proxy:

First, the customer needs to identify the GitBash Cli traffic:

define condition exclue_cli_github

request.header.user-agent="git"

end

Then the proxy admin needs to exclude this from the WSS forward list:

<Forward Cloud> condition=casb_groups conditions=WSS_Forward_List condition=!exclude_cli_github