Viewing Security Posture Overview

Netskope SaaS Security Posture Management (SSPM) provides a brief overview of your apps on the Overview page. The Overview page provides a summary of the following:

• SaaS apps configured in SaaS Security Posture Management. The Applications widget shows a summary of 3rd Party Apps and SaaS apps.

• Total number of users across SaaS apps and the past 7 days trend graph.

• Total number of findings which includes passed and failed rules and findings broken down by severity/apps, and past 7 days trend graph.

• Compliance standard pass percentage, percentage of passed rules by compliance standard, past 7 days trend graph, and failed findings count by compliance standard.

To view the Overview page, log in to your Netskope tenant and navigate to API-enabled Protection > Security Posture SaaS > Overview.

You can refresh the page and the Result As Of label shows the date and local time.

Let us dive into the different 4 widgets on the Overview page.

Applications

This widget displays a summary of all the SaaS apps configured in SaaS Security Posture Management. It also shows the apps that are not configured. For the non-configured apps, you can click the SETUP INSTANCE link at the top-right corner of the Application widget. This takes you to the instance set up page where you can set up the non-configured SaaS apps.

The widget also shows a summary of 3rd Party Apps. Connected app is a mechanism to link a 3rd-party application to a SaaS application platform using OAuth for authorization. For example, Box for Salesforce is a connected app that allows Box to access Salesforce resources using an OAuth tokenx.

Click on the number of Apps Configured, takes you to the Apps page. The 3rd Party Apps are categorized by risk levels. Clicking on the 3rd Party Apps risk donut chart, will navigate you to 3rd Party Apps page with corresponding risk level filter. Click on the number of 3rd Party Apps, and it will navigate you to 3rd Party Apps page. Click on Critical or High risk 3rd Party Apps bar chart segment, and it will navigate you to 3rd Party Apps page with corresponding “App connected to” and risk level filter. Click on the total number of 3rd Party Apps specific to app suite of bar chart, and it will navigate you to 3rd Party Apps page with corresponding “App connected to” filter.

Users

The Users widget provides a consolidated view of all users discovered across integrated applications. It helps administrators monitor user distribution, access types, and administrator counts across the environments.

Click any metric at the top of the widget to open the Users page with corresponding filters:

• Total Users: Displays the total number of unique users across all connected applications.
• Administrators: Indicates the total number of users with administrator privileges.
• Internal: Represents the number of users identified as internal to the organization.
• External: Represents users identified as external to the organization.

Below the summary, a tabular section lists detailed information for each integrated application:

• App: Name of the connected app.
• Users: Number of users associated with the respective app.
• Administrators: Number of users with administrative privileges for that app.

The Number of Users line graph visualizes the user trends over time. Hovering over data points on the graph displays details.

The bar graph provides a visual representation of user distribution across applications. Each bar corresponds to an application and illustrates the number of users categorized by type.

Findings

This widget displays the total number of raw findings which includes passed and failed rules and findings. On the top-right corner of the widget, you can click VIEW FAILED FINDINGS. This takes you to the Findings > Raw Findings page. You can view all the failed findings.

You can also click the total, passed, and failed numbers. This takes you to the Findings > Raw Findings page with preselected filters.The donut chart displays the total number of failed findings by severity. You can click a part of the donut chart or the total failed findings. Once you click, the page redirects to the Findings > Raw Findings page with preselected filters.The widget also displays a trend chart. It shows the failed findings trend count in the last 7 days. At the bottom-right of the trend graph, there is a % value. This shows the % change between the current date and the past weeks’ average.At the bottom of the widget, you can see a bar graph that displays the failed findings count categorized by the configured SaaS apps. The failed findings are further classified by severity. You can click a part of the bar graph. Once you click, the page redirects to the Findings > Raw Findings page with preselected filters.

Compliance

This widget displays the compliance standard pass %, % of passed rules by compliance standard, past 7 days trend graph, and failed findings count by compliance standard. On the tip-right of the widget, you can click VIEW ALL RULES. This takes you to the Findings > Rules page. You can view all the rules.

You can also click the total rules, pass rate %, passed, and failed numbers. This takes you to the Findings > Rules page with preselected filters. The widget also displays a bar graph consisting of % of passed rules by compliance standard. You can scroll through the list to see all the compliance standards. The % of passed rules are further classified by failed and passed rules.

The widget also displays a trend chart. It shows the pass % rate trend count in the last 7 days. At the bottom-right of the trend graph, there is a % value. This shows the % change between the current date and the past weeks’ average. At the bottom of the widget, you can see a bar graph that displays the failed findings count by compliance standard. You can scroll through the list to see all the compliance standards. The failed findings are further classified by severity. You can click a part of the bar graph. Once you click, the page redirects to the Findings > Raw Findings page with preselected filters.