Inventory tab

In order for an app to display in the SaaS apps module and be used in a policy, it must be added to the inventory.

When activity for an app is reported via a browser event, the app is automatically added. You can also manually add apps, which have not reported any activity, to start building an inventory in advance (see Manually adding SaaS apps to the inventory).

To help you manage and monitor SaaS apps used by your organization, each app is given a verdict, risk score, and category:

• An app's verdict indicates whether it has been approved or unapproved for use by your organization, or is still being assessed. For more on this, see Editing SaaS app verdicts.
• An app's risk score indicates its potential for security breach or data loss. By default, each SaaS app is preassigned a risk score based on external information, such as security profiling, web app category, and supported app operations, to determine this. If preferred, you can change an app's risk score, based on your own assessment, as described in Editing SaaS app risk scores.
• An app's category indicates its web classification based on external information. You can only modify the category of a custom SaaS app.

When building policies, you can optionally define verdicts, risk scores, and categories as conditions for matching the SaaS apps you want to monitor. For details on SaaS app policy configuration, refer to SaaS apps and SaaS apps: origin in the FortiDLP Policies Reference Guide.

From the Inventory tab, context box buttons are available for pivoting to related information in other modules. For example, to explore events that occurred as the result of a specific app being used, you could hover your mouse over the application name to apply it as a search filter in the Investigate module. For more information, see Viewing the SaaS app inventory.