Cheat Sheet: SaaS Security with Prisma Access (Managed by Strata Cloud Manager)
Focus
Focus
Prisma Access

Cheat Sheet: SaaS Security with Prisma Access (Managed by Strata Cloud Manager)

Table of Contents


Cheat Sheet: SaaS Security with Prisma Access (Managed by Strata Cloud Manager)

Here’s everything you need to know to use SaaS Security with Prisma Access (Managed by Strata Cloud Manager).

Get Started

Here’s how to get up and running with SaaS Security Inline on Prisma Access (Managed by Strata Cloud Manager):
  • Confirm that the SaaS Security add-on license is included with your Prisma Access subscription.
    Go to ManageService SetupOverview to check what’s available with your license.
    If you're using Strata Cloud Manager, go to ManageConfigurationNGFW and Prisma AccessOverview. Select the Prisma Access configuration scope.
  • If you haven’t already, activate the SaaS Security Inline app on the hub.
    After activation, SaaS Security Inline automatically discovers all SaaS applications and users and analyzes users’ SaaS activity and usage data from your Prisma Access logs that are stored in Strata Logging Service.
  • Manage administrator roles and access.
    Go to the hub to provide roles-based access to SaaS Security controls in Prisma Access Cloud Management.
    To comprehensively manage SaaS Security, users must also be an administrator for the SaaS Security Inline app. Jump directly from the Prisma Access Cloud Management dashboard to the SaaS Security Console to add SaaS Security Inline administrators.
  • Explore the SaaS Security dashboard in Prisma Access (Managed by Strata Cloud Manager).
    Go to ManageConfigurationSecurity ServicesSaaS Security.
    If you're using Strata Cloud Manager, go to ManageConfigurationSaaS Security.
    All dashboard views are supported directly in Prisma Access (Managed by Strata Cloud Manager). Examine these views to identify risky SaaS applications and users and SaaS Security Posture Management. SaaS Security Posture Management (SSPM) helps detect and remediate misconfigured settings in sanctioned SaaS applications through continuous monitoring.
  • Review and share the SaaS Security report.
    SaaS Security Inline includes a SaaS Security report that provides a snapshot of application usage with advanced aggregated data and views. This report serves as a communication tool between your SaaS security team and executive management. You can share this on-demand PDF report with your SaaS security team for a periodic check-in, or email the report to your executives to highlight the SaaS applications in use in your organization and the security risks they pose.
  • See what else you can do with SaaS Security and .

SaaS Policy Recommendations

To gain visibility into and control of SaaS applications, SaaS Security admins create SaaS rule recommendations with specific SaaS App-IDs provided by the App-ID Cloud Engine (ACE).
In Prisma Access (Managed by Strata Cloud Manager), you can now review and choose to accept the rules that SaaS Security admins recommend. SaaS rule recommendations are added to your web access policy—you must have Web Security enabled to leverage SaaS rule recommendations.
Here’s how you can get started — review the workflow to review and accept SaaS policy recommendations here:
  1. SaaS Security admins create SaaS rule recommendations in the SaaS Security Inline app or directly in Prisma Access (Managed by Strata Cloud Manager).
    ➡ In Prisma Access (Managed by Strata Cloud Manager), go to ManageConfigurationSecurity ServicesSaaS Security
    If you're using Strata Cloud Manager, go to ManageConfigurationSaaS Security.
  2. You can review and import SaaS rule recommendations.
    ➡ Go to ManageWeb SecurityWeb Access Policy
    If you're using Strata Cloud Manager, go to ManageConfigurationNGFW and Prisma AccessSecurity ServicesWeb SecurityWeb Access Policy. Select the Prisma Access configuration scope.
  3. The SaaS rule recommendations you’ve imported are labeled so you can easily identify them.