About Configuring the Salesforce Proxy
Planning and deploying Salesforce via an on-premises proxy requires the following steps:
- Skyhigh CASB Topologies describes the recommended Skyhigh CASB topologies.
- Deployment Requirements includes information about planning for a successful deployment.
- Capacity and Sizing describes Skyhigh CASB performance and throughput benchmarks, and the considerations for capacity planning.
- Implementation Scenarios contains information about implementing Skyhigh CASB for Salesforce.
- API-based DLP Policies discusses how Skyhigh CASB supports Salesforce APIs.
Prerequisites
- Virtual Appliance. Two virtual appliances are recommended, with the following requirements:
- 12 virtual CPU, 2.93 GHz
- 8 GB vRAM (16 GB recommended)
- 60 GB vHard disk
- One network data interface
- One management interface (optional)
- Public IP address. This allows Skyhigh CASB to monitor inbound traffic. See Deployment and Network Requirements for in-depth information about routing traffic to IP addresses.
- Key Server. KMIP complaint (KMIP 1.0, 1.1) protocol.
- Preconfigured Forward Proxy. Unauthenticated to allow Skyhigh CASB requests to reach to Salesforce.
- Salesforce email alias needs to be available for configuration.
- SMTP mail exchange. Configured to relay emails from Skyhigh CASB SMTP server.
- Outgoing mail server details need to be available.
- SAML SSO.
- Identity provider certificates (preconfigured) need to be available.
- Salesforce Self-Signed Certificate needs to be available.