Skip to main content
SonicWall Cloud Secure Edge (CSE, formerly Banyan Security) is SonicWall’s zero trust access product: it decides, for each user and the device they sign in from, which private services they reach. Each of your clients that uses CSE has its own CSE org, and so may your own company. Connect CSE for those clients, and Neo agents can read it while they handle a ticket or run a scheduled task. This is a different product from SonicWall firewalls, which connect through the SonicWall integration.

What Neo can do with Cloud Secure Edge

  • List a client’s users, and check whether a user exists in CSE, is active, and when they last signed in
  • Read a user’s registered devices and say whether each is employee-owned (personal) or company-owned, as CSE records it; when CSE does not record it, Neo says it is unknown
  • Read a device’s trust level, MDM state and ban status, and the access events behind a denial
  • Read roles, policies, services, access tiers, connectors and the admin audit log
  • With a key that allows it and a permission group set to Read / Write, remove a leaver, ban a lost device or cap its trust level
See SonicWall Cloud Secure Edge API for the permission groups and profiles.

How ownership is read

CSE stores an ownership value on each device when it is registered: Employee Owned, Corporate Dedicated, Corporate Shared or Other. The user picks it in the CSE app, or the device manager that installed the app sets it. Neo answers “personal” for Employee Owned and “company-owned” for the two corporate values, and “unknown” for Other or no value. Neo never decides ownership from whether a device has an MDM, because a company can manage a personal phone.

One connection per client

A CSE API key belongs to one org, so you connect CSE once for each client, with that client’s Command Center address and key, and the connection belongs to that client’s company in Neo. On a ticket that belongs to a company, the agent reaches only that company’s connection. Otherwise (a chat, a scheduled agent, or a ticket with no company) it names the client it works for, and Neo accepts only a company on your Companies tab. To connect your own company’s CSE org, pick your own company in the PSA as the customer.

Next steps

Connect SonicWall Cloud Secure Edge

Create an API key in a client’s Command Center and save it in Neo.