Protecting SaaS applications is just one step in internet threat protection. Cloud Access Security Broker provides SaaS application access security. Layered security provides easily managed controls for managing who can access your SaaS application and which devices they can use to connect. You can route public traffic destined for the internet. Internet traffic routed through your Service Tunnels uses the source IP of a CSE Access Tier. Administrators can then whitelist the IP to restrict user access on log in and throughout a user’s session on a SaaS platform.