Skip to main content
Skyhigh Security

Configure Salesforce Instance in Skyhigh CASB's Sandbox Environment

Skyhigh CASB provides a Sandbox environment to configure a proxy for your Salesforce instance. Use the following steps to configure your inline proxy to monitor traffic to and from Salesforce for Data Loss Prevention actions and anomaly detection.

NOTE: Once the Salesforce instance is configured with the primary or the secondary proxy regions in the Skyhigh CASB's Sandbox environment, you can move the same instance to production. For details, see Move Salesforce Instance to Production.

To configure a proxy for Salesforce Instance:

  1. Log in to Skyhigh CASB. 
  2. Go to Settings > Service Management.
  3. Click Add Service Instance
    clipboard_ec11a4417d65ec32d54f87c3295d4f419.png
  4. Click Salesforce, and enter an Instance Name.
  5. Click Done
  6. Select your Salesforce instance from the Services list. (If no services are listed, contact Skyhigh CASB Support.)
  7. Click the Setup tab, and under Proxy, click Get Started
  8. Under Configure Proxy, click Configure
  9. For Select Proxy Location, select Skyhigh CASB. Click Next
    clipboard_e1a04362a082cf2fa7fb2d1e205b84d6a.png
  10. Configure the Proxy Domain as shown:
    clipboard_e66e9be67f82ac040349a160eb49ecf52.png
    • Under Choose Proxy Domain:
      • Proxy Domain. Select the required proxy domain and enter the instance name.
    • Under Identify Service Instance:
    • To find the closest Skyhigh CASB proxies in the Sandbox environment, click Find Closest Proxies. The following two options are enabled and configure as shown:
      clipboard_e4bd3d2edd0874ae1a0a9e086e4e1b599.png

NOTE: If the closest proxy region shown is not closest to the Salesforce Instance region where it is hosted or not listed in the recommended Primary and Secondary Proxy Region menus, then contact Skyhigh Security Support.

  • Primary Proxy Region. Select the primary proxy region from the menu.
  • Secondary Proxy Region. Select the secondary proxy region from the menu. If the primary proxy region fails to host the Salesforce instance, then the secondary proxy region is activated.
  1. Click Save
  2. Under IP addresses added to the allow list, the list of IP addresses is provided. Copy to clipboard or make a note of these IPs. Add these IP addresses to your firewall's allow lists.
    clipboard_ee08a28ef1e7a5a9e921cb9fc8a29edcb.png
  3. Click Done.
  4. To check if your Salesforce instance is successfully configured with Sandbox Environment, go to your Salesforce instance Overview tab and under the Proxy > Proxy Details section,  Environment is updated to Sandbox.
    clipboard_e85865ad1157a7ade8e58804fb77fab53.png
  • Was this article helpful?