We have an integration with CloudSOC/CASB and Cloud SWG and would like to understand if the CASB get its fed from CSWG using the CPL request.icap_service?
The answer is that it is done via ICAP.
The icap_service is the elastica one (not CASB/DLP) and REQMOD and RESPMOD are sent over ICAP.