Fortinet white logo
Fortinet white logo

FortiDLP Console User Guide

Editing SaaS app verdicts

Editing SaaS app verdicts

When an app is first added to the inventory, it will have a verdict of Not set, indicating it has not been acknowledged. You can then change the verdict to one of the following.

App verdicts
Verdict Description
Sanctioned Indicates an app is approved for use. You can include and/or exclude labels to only sanction the app for a group of entities. For information on how this can be used with policies, refer to SaaS apps in the appendix of the FortiDLP Policies Reference Guide.
Unsanctioned

Indicates an app is unapproved for use.

Note

By setting the verdict to Unsanctioned, you do not block the app from being used. Rather, this is a way for you to categorize apps that you do not approve of, making their activity easier to track.

In review Indicates an app is being assessed for sanctioning or unsanctioning.

You can edit an individual app's verdict or edit multiple app verdicts at one time.

How to edit an individual SaaS app's verdict
  1. In the FortiDLP Console, on the sidebar menu, click .
  2. Select the Inventory tab.
  3. Optionally, filter the apps in the table by entering a query into the search bar at the top of the page. For a list of the available search properties, see SaaS app search properties.
  4. In the table, at the end of the row of the app, do one of the following:
    • To sanction the app:
      1. Click> Sanction.
      2. Do one of the following in the Include section:
        • To include all entities, leave the All entities radio button selected.
        • To only include specific entities:
          1. Select the Specific entities (by label) radio button.
          2. In the list below, select labels assigned to the entities you want to include.
          3. Do one of the following:
            • To include entities that have all of the previously selected labels, select the Require all radio button.
            • To include entities that have any of the previously selected labels, select the Require any radio button.
      3. Do one of the following in the Exclude section:
        • To not exclude any entities, leave the No entities radio button selected.
        • To exclude specific entities:
          1. Select the Specific entities (by label) radio button.
          2. In the list below, select labels assigned to the entities you want to exclude.
          3. Do one of the following:
            • To exclude entities that have all of the previously selected labels, select the Require all radio button.
            • To exclude entities that have any of the previously selected labels, select the Require any radio button.
        Example

        For example, to sanction the app for all entities:

        1. In the Include section, leave the All entities radio button selected.
        2. the Exclude section, leave the No entities radio button selected.

        To sanction the app for entities that have a "Sales" label but not a "Leavers" label:

        • In the Include section:
          1. Select the Specific entities (by label) radio button.
          2. In the labels list, select the Sales label.
        • In the Exclude section:
          1. Select the Specific entities (by label) radio button.
          2. In the labels list, select the Leavers label.

    • To unsanction the app, click> Unsanction.
    • To review the verdict of the app, click> Review.
    • To edit the labels of a sanctioned app, click > Edit labels, and follow steps 4i-4iii.
  5. Click Confirm or Save.
How to edit multiple SaaS app verdicts
  1. In the FortiDLP Console, on the sidebar menu, click .
  2. Select the Inventory tab.
  3. Optionally, filter the apps in the table by entering a query into the search bar at the top of the page. For a list of the available search properties, see SaaS app search properties.
  4. Above the table, at the right of the page, do one of the following:
    • To sanction the apps, click> Sanction, and follow steps 4i-4iii in How to edit an individual SaaS app's verdict.
      Note

      This operation affects all apps in the table, updating apps already sanctioned and sanctioning non-sanctioned apps.

    • To unsanction the apps, click> Unsanction.
    • To review the verdict of the apps, click> Review.
  5. Click Confirm or Save.

Editing SaaS app verdicts

Editing SaaS app verdicts

When an app is first added to the inventory, it will have a verdict of Not set, indicating it has not been acknowledged. You can then change the verdict to one of the following.

App verdicts
Verdict Description
Sanctioned Indicates an app is approved for use. You can include and/or exclude labels to only sanction the app for a group of entities. For information on how this can be used with policies, refer to SaaS apps in the appendix of the FortiDLP Policies Reference Guide.
Unsanctioned

Indicates an app is unapproved for use.

Note

By setting the verdict to Unsanctioned, you do not block the app from being used. Rather, this is a way for you to categorize apps that you do not approve of, making their activity easier to track.

In review Indicates an app is being assessed for sanctioning or unsanctioning.

You can edit an individual app's verdict or edit multiple app verdicts at one time.

How to edit an individual SaaS app's verdict
  1. In the FortiDLP Console, on the sidebar menu, click .
  2. Select the Inventory tab.
  3. Optionally, filter the apps in the table by entering a query into the search bar at the top of the page. For a list of the available search properties, see SaaS app search properties.
  4. In the table, at the end of the row of the app, do one of the following:
    • To sanction the app:
      1. Click> Sanction.
      2. Do one of the following in the Include section:
        • To include all entities, leave the All entities radio button selected.
        • To only include specific entities:
          1. Select the Specific entities (by label) radio button.
          2. In the list below, select labels assigned to the entities you want to include.
          3. Do one of the following:
            • To include entities that have all of the previously selected labels, select the Require all radio button.
            • To include entities that have any of the previously selected labels, select the Require any radio button.
      3. Do one of the following in the Exclude section:
        • To not exclude any entities, leave the No entities radio button selected.
        • To exclude specific entities:
          1. Select the Specific entities (by label) radio button.
          2. In the list below, select labels assigned to the entities you want to exclude.
          3. Do one of the following:
            • To exclude entities that have all of the previously selected labels, select the Require all radio button.
            • To exclude entities that have any of the previously selected labels, select the Require any radio button.
        Example

        For example, to sanction the app for all entities:

        1. In the Include section, leave the All entities radio button selected.
        2. the Exclude section, leave the No entities radio button selected.

        To sanction the app for entities that have a "Sales" label but not a "Leavers" label:

        • In the Include section:
          1. Select the Specific entities (by label) radio button.
          2. In the labels list, select the Sales label.
        • In the Exclude section:
          1. Select the Specific entities (by label) radio button.
          2. In the labels list, select the Leavers label.

    • To unsanction the app, click> Unsanction.
    • To review the verdict of the app, click> Review.
    • To edit the labels of a sanctioned app, click > Edit labels, and follow steps 4i-4iii.
  5. Click Confirm or Save.
How to edit multiple SaaS app verdicts
  1. In the FortiDLP Console, on the sidebar menu, click .
  2. Select the Inventory tab.
  3. Optionally, filter the apps in the table by entering a query into the search bar at the top of the page. For a list of the available search properties, see SaaS app search properties.
  4. Above the table, at the right of the page, do one of the following:
    • To sanction the apps, click> Sanction, and follow steps 4i-4iii in How to edit an individual SaaS app's verdict.
      Note

      This operation affects all apps in the table, updating apps already sanctioned and sanctioning non-sanctioned apps.

    • To unsanction the apps, click> Unsanction.
    • To review the verdict of the apps, click> Review.
  5. Click Confirm or Save.