Hi Community,
Are you curious about what’s actually happening inside your "Google Drive" traffic?
Currently, when the Application filter is set to Google Drive, the dashboard displays events from Google Shared Domains identified generally as "Google Drive". We’ve recently released a Connector Improvement that provides much deeper visibility. I am sharing the dashboard that generated the attached example report so you can see how to obtain a corresponding report for your own tenants and understand the impact this would have on your specific data landscape.
The "Current State" vs. The "Improved State"
-
Current State: The dashboard currently displays events from shared domains generally identified as "Google Drive".
-
Improved State: Once the recently released Connector Improvement is enabled, these domains would no longer be identified as "Google Drive". Instead, they would be automatically assigned to the specific new application identified within the dashboard.
Initial Dimension of Impact (Based on Attached Example Report)
Using the data from the attached PDF, which analyzes events from the last 90 days, we can see the significant dimension of impact enabling this change would provide:
-
Significant Re-identification: In this specific report, 581,885 events currently labeled as "Google Drive" would be re-identified as Google Cloud Storage.
-
Granular Mapping: Traffic that is currently under the Drive umbrella would be categorized into specific apps like Google Gmail (279 events), Blogger (120 events), and Google Photos (101 events).
-
URL-Level Precision: The improvement would use specific URLs to categorize traffic, such as mapping
dynamicmail-pa.clients6.google.com/batchdirectly to Google Gmail.
How to Enable This Improvement
[!IMPORTANT] Next Steps: To transition to this "Resulting State" and unlock this granular data in your own tenant, you must contact your account team. They will assist you in enabling the Connector Improvement for your specific environment.
Enabling this doesn't just "clean up" your dashboard—it gives you the clarity needed to refine security policies and understand your true traffic distribution.
