SaaS Visibility and Controls for Prisma Access (Managed by Strata Cloud Manager)

Table of Contents

Use this workflow to onboard both SaaS visibility and policy enforcement on SaaS Security Inline on Prisma Access (Managed by Strata Cloud Manager).

SaaS Security Inline protects against cloud‑based threats by blocking traffic for unsanctioned SaaS apps and risky user activity using Security policy. Use the following workflow if you want to use all the features of SaaS Security Inline, including App-ID Cloud Engine (ACE), SaaS policy rule recommendations, and SaaS visibility.

Step 1: Activation

Learn about SaaS Security Inline. (All administrators)
Learn about the Hub roles that enable administrators to collaborate on SaaS Security. (All administrators)
Learn about ACE. (Web Security administrator)

With a SaaS Security Inline license, ACE is enabled by default on Prisma Access (Managed by Strata Cloud Manager).
Activate SaaS Security Inline on the Hub. (SaaS administrator)

Step 2: SaaS Security Configuration

Enable Web Security. (Web Security administrator)
Integrate with Azure Active Directory so that SaaS Security Inline can identify your AD groups. (SaaS administrator)
Add administrators to manage SaaS Security. (Security administrator)

Step 3: Policy Rule Recommendation Enforcement

Review the guidelines for effective collaboration and rulebase management. (All administrators)
Author and submit SaaS policy rule recommendations to your Prisma Access administrator, after adhering to prerequisites. (SaaS administrator and Data Security administrator)
Import and push new SaaS rule recommendations. (Web Security administrator)
Push new SaaS rule recommendations. (Security administrator)

Step 4: Policy Rule Recommendation Management

Continuously monitor the SaaS policy rule recommendations to ensure they’re in sync. (All administrators)
Enable automatic updates and monitor the SaaS policy rule recommendations for changes. (Web Security administrator)
- For updates, reimport changes to active SaaS policy rule recommendations.
- For deletions, remove recommendation mapping, then delete the policy rule.
Use Policy Optimizer on Prisma Access (Managed by Strata Cloud Manager) or Policy Optimizeron NGFW or Prisma Access (Managed by Strata Cloud Manager) to determine when and how many times traffic matches the Security policy rule to determine its effectiveness. (Security administrator)

SaaS Security Docs

SaaS Visibility and Controls for Prisma Access (Managed by Strata Cloud Manager)

SaaS Security Docs

SaaS Visibility and Controls for Prisma Access (Managed by Strata Cloud Manager)

Activation & Onboarding

Next-Generation Firewalls

SASE

Cloud-Delivered Security Services

Visibility & Monitoring

Best Practices

Experts Corner

Technical Documentation

Company

Legal Notices