Using the template - Shadow IT report

This topic provides an example for creating a report from a template. This topic also provides a brief explanation of the report used in the example: the Shadow IT Report.

This report requires a valid license for the Security Automation Service (SOAR).

To view a sample of the report:

1. Go to Reports > Report Definitions > Templates.

2. In the Search field, type Shadow IT Report.

   The table will filter and display the Template - Shadow IT Report.

   

3. In the Preview column for the report, click HTML or PDF to view the sample report in that format.

   For example, see page 1 of the report in PDF below.

   

   The Shadow IT Report provides enhanced visibility and control for cloud based applications.

   Detected applications are classified as:

   • Managed: Allowed applications.

   • Unmanaged: Blocked, quarantined, or reset applications.

   Information about the applications, including their Category and Compliance Standard, is provided by the Shadow IT database (SIDB).

   Application risk is determined by a numerical score provided by the SIDB for each application. The Risk Levels in the report are as follows:

   • Low: Score is 1 to 15.

   • Guarded: Score is 16 to 30.

   • Elevated: Score is 31 to 50.

   • High: Score is 51 to 70.

   • Severe: Score is 71 to 100.

   The Overall Risk Level is the average application risk score for all detected managed applications.

   The High Risk Sessions are the number of sessions from managed applications with a risk score of High or Severe.

To create the report from the template:

1. Go to Reports > Report Definitions > Templates.

2. Select the checkbox for Template - Shadow IT Report.

3. From the More dropdown, click Create Report.

4. In the Name field, enter a name for the report.

   If you did not make any changes, consider naming the report Shadow IT Report. The GUI notifies you if a duplicated name already exists.

5. From the Save to Folder dropdown, select a folder for the report.

   If needed, you can save the report to multiple folders. To create a report folder, see Organizing reports into folders.

6. Click OK.

   The report is now available to be run, as needed, from Reports > Report Definitions > All Reports.

To run the report:

1. Go to Reports > Report Definitions > All Reports, and double-click the row for the Shadow IT Report.

   The Edit: Shadow IT Report pane opens.

2. In the Generated Reports tab, click Run Report.

3. When the report is available, click the Format to open the report in.