Getting Started with Cloud Application Security

Updated 1 hour ago by admin

Complete the Web Security Getting Started guide first. Cloud Application Security uses the same agents and Rule Builder.

This guide covers the SaaS Catalog, SaaS Activity reporting, and creating a rule to block an application action.

Animated walkthrough

1. Explore the SaaS Catalog

  1. Click Browse ⟶ SaaS Catalog.
  2. Search for an app, or open a class (for example Artificial Intelligence Software). A green tick shows the app is sanctioned.
  3. Click an app to see its actions, their Baseline Risk and Custom Risk, and whether each action is tracked and active.

For more information, see SaaS Catalog.

2. Report on SaaS activity

  1. Click Analytics and open SaaS Activity.
  2. Choose a Timespan and click Run Report. The results show which apps and actions are being used, by whom, and their risk.
  3. Click Graph to see how users, apps, actions and devices connect, and click Highlight Unsanctioned to spot Shadow IT.
  4. Click the ⓘ icon on a row for full details, or the ⋮ button and Manage App to open the app in the SaaS Catalog.

The AI Observability and Unsanctioned SaaS widgets on the Dashboard give a quick overview. For more information, see Activity Reports.

3. Block an application action

For example, to stop files being uploaded to ChatGPT:

  1. Click Browse ⟶ Rule Builder and click Create Rule. Name the rule and choose Block as the final action.
  2. In the rule editor, add the Specific SaaS match from the Toolbox and click its settings (sliders) icon.
  3. Search for the app and tick the action, for example ChatGPT ⟶ Uploaded a file. Click Done.
  4. Make sure the Block action is in the Actions column.

For more information, see Rule Builder.

How did we do?