Skip to content

[CF1 Ref Architecture] Update Secure access to SaaS applications#28639

Open
caley-b wants to merge 1 commit intoproductionfrom
ref-arch-review-sase-saas-apps
Open

[CF1 Ref Architecture] Update Secure access to SaaS applications#28639
caley-b wants to merge 1 commit intoproductionfrom
ref-arch-review-sase-saas-apps

Conversation

@caley-b
Copy link
Contributor

@caley-b caley-b commented Feb 26, 2026

Summary

Testing new skill for reviewing and updating the ref arch diagrams. It addresses 18 gaps identified since last review (2024-12-17). Key changes:

  • Add CASB, Shadow IT discovery, tenant control, and AI prompt protection
  • Expand Browser Isolation with data protection controls and logging
  • Detail DLP capabilities, Application Granular Controls, and Body Phase selector
  • Add egress policy enhancements (hostname/domain filtering)
  • Add reusable policies, user risk scoring, and forensic copy to Logpush
  • Fix ZNTA typo to ZTNA
  • Add related resources links (Zero Trust for SaaS design guide, CrowdStrike/SentinelOne ref archs, GenAI blog)
  • Update products frontmatter to include casb and dlp
  • Update reviewed date to 2026-02-26

Screenshots (optional)

Documentation checklist

  • Is there a changelog entry (guidelines)? If you don't add one for something awesome and new (however small) — how will our customers find out? Changelogs are automatically posted to RSS feeds, the Discord, and X.
  • The change adheres to the documentation style guide.
  • If a larger change - such as adding a new page- an issue has been opened in relation to any incorrect or out of date information that this PR fixes.
  • Files which have changed name or location have been allocated redirects.

…th SASE

Review and update the ref arch diagram to address 18 gaps identified since
last review (2024-12-17). Key changes:

- Add CASB, Shadow IT discovery, tenant control, and AI prompt protection
- Expand Browser Isolation with data protection controls and logging
- Detail DLP capabilities, Application Granular Controls, and Body Phase selector
- Add egress policy enhancements (hostname/domain filtering)
- Add reusable policies, user risk scoring, and forensic copy to Logpush
- Fix ZNTA typo to ZTNA
- Add related resources links (Zero Trust for SaaS design guide, CrowdStrike/SentinelOne ref archs, GenAI blog)
- Update products frontmatter to include casb and dlp
- Update reviewed date to 2026-02-26
@github-actions
Copy link
Contributor

This pull request requires reviews from CODEOWNERS as it changes files that match the following patterns:

Pattern Owners
/src/content/docs/reference-architecture/ @securitypedant, @cloudflare/pcx-technical-writing

@github-actions
Copy link
Contributor

CI run failed: build logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants