Skip to main content
The SonicWall Cloud Secure Edge API tool gives Neo agents access to a client’s CSE org (formerly Banyan Security). The common use is a ticket about a user’s access: the agent checks that the user exists in CSE, reads the device they sign in from and whether it is personal or company-owned, and reads the trust level and events behind a denial.
Automatically enabled when you configure SonicWall Cloud Secure Edge permissions in your agent workflow.

​
What It Does

  • List users, and check whether a user exists, is active, and when they last signed in
  • Read a user’s devices with their ownership (Employee Owned, Corporate Dedicated, Corporate Shared or Other), platform, MDM state, ban status and trust level. Neo answers “unknown” when CSE records no owner, and never reads ownership from MDM state
  • Read access, trust and device events, and the admin audit log
  • Read roles, policies, threat profiles, services, SaaS apps, access tiers, connectors and service tunnels
  • Remove users and devices, ban or unban a device, cap a user’s or device’s trust level, and change roles, policies, services and access tiers when you allow it

​
One connection per client

Each client’s CSE org is connected under that client’s company. On a ticket, the agent reaches only the ticket company’s org. See SonicWall Cloud Secure Edge overview.

​
Permission Groups

​
Access Profiles

​
Writes that always ask a technician

Under every profile, a technician approves each write that replaces a whole record, because a field the agent leaves out may be cleared: replacing a role, policy, threat profile, service bundle, cloud resource, access tier, its local config, a connector or a service tunnel, the v1 calls that create or update a role, policy, service or SaaS app, and a device update, which also bans and unbans.

​
Safety Controls