Determine the Risks Posed by Third-Party Plugins for One Marketplace App

1. Log in to Strata Cloud Manager.
2. Select ConfigurationSaaS Security.
3. Navigate to the third-party plugins for a marketplace app. Do one of the following:

   • Navigate to the third-party plugins from the dashboard:
     1. Select Posture SecurityDashboard, and locate the Applications by 3rd Party Plugins area. This area shows the marketplace apps that have the most unreviewed plugins. The area shows the number of unreviewed plugins for each app.
        Investigate each unreviewed plugin to judge whether it threatens your organization's security.
     2. For the marketplace app whose third-party plugins you want to review, click the Unreviewed Plugins link.

   • Navigate to the third-party plugins for a marketplace app from the Applications page.
     1. Select Posture SecurityApplications.
     2. Locate the SaaS app, then View Details.
     3. Select the Connected Applications tab.
4. On the Connected ApplicationsConnected Applications tab, view the list of third-party plugins that one or more users added to the marketplace app.

   The table on this page lists the plugin apps that were connected to the marketplace app. The table displays information for each plugin, such as its severity (based on the scopes that were granted to the plugin), whether the plugin was installed for the organization or for individual users, and whether the plugin is a public or private app. The information that SSPM can display in the table depends on the type of marketplace app that’s hosting the third-party plugin.

   The Status column of the table identifies which plugins were Not Reviewed. Assess these plugins to determine if they are a risk to your environment.

   To filter the table to show only certain apps, click any of the app counts displayed in the upper section of the page, such as the app severity or review status counts. In the table, you can also Add Filter to filter the table by attributes such as the app severity, review status, or accessed scopes.

   Click the table's download icon to export the table information to a CSV file. The file will contain all the apps unless you applied a filter to the table.
5. In the Applications column, click the name of the third-party plugin that you want to review.

6. Examine the details of the third-party plugin.
7. Take action on the third-party plugin.

   From the Actions column, you can specify that the plugin was Reviewed, or you can Revoke Access to the plugin. From the Users tab, you can also Revoke Access for individual users (if SSPM supports the Revoke Access action for the marketplace app).

   Although you can revoke access to a plugin that does not prevent a user from subsequently installing the same plugin. To instruct SSPM to periodically scan marketplace apps for certain plugins, you can create a Plugin Access Control policy. When the policy is enabled, SSPM can notify you when users install plugins that you don’t want in your environment.