This article highlights a new capability or feature introduced in PAN-OS 8.0. If you’d like to learn more about this topic or PAN-OS 8.0 in-general, you’ll also want to check out our world-class Technical Documentation.
You'll definitely like the new visibility improvements PAN-OS 8.0 brings to Software as a Service (SaaS) apps. These improvements provide user-group based reporting (be sure to check out the 'gotcha' here), add SaaS activity to the Application Comment Center (ACC), provide information on user counts, and allow added control.
Feature highlights
User group based reporting for SaaS usage
Add SaaS activity to ACC
Allow generation of tailored SaaS reports for: ‒Specific zones ‒Specific groups of users
Allow control over the number of items displayed on charts
Expose unique user counts
Application attribute “is saas” now available
User counts now available for particular applications in reports
Charts added to SaaS report
Top Applications by User Groups (up to 20)
Included groups are selected by the admin when configuring the report
Data Transfer by User Groups
If no groups are defined, all the data will be shown in one column
Application Detail sections now include top groups
Reporting enhanced with additional options:
Now can report on up to a 90 day interval
Can drill down on a group or zone basis
Can limit the number of subcategories included if desired
If “Include user group information in the report” is selected, the “manage groups” link can be clicked to pop out the configuration dialog box.
The number of selected groups will be shown in parentheses:
Available groups will be shown on the left pane.
Highlight desired groups and click + to add them to the Included Groups for the SaaS report.
Gotcha: admins will need to select groups explicitly, nested groups will not be included.
ACC has been enhanced to toggle between viewing applications by risk or by sanctioned state