User/Device Geolocation in GAT Shield.
You can view the video tutorial below.
This feature allows an Admin to track and locate all devices using advanced Shield filters.
Start off by navigating to the User/Device Geo Reporting section in GAT Shield.
In this area you will have access to the Geolocation window, here you’ll see all devices currently enrolled in your domain being viewed by Shield UUID or you can also choose to view devices by IP.
You’ll notice these numbers around the map, these are devices that are close to each other and have been grouped up together.
Clicking on the value will zoom in and spread the devices out more accurately.
After zooming in we can now see these computer icons, these are our devices.
If you click a device you will be shown it’s Shield UUID, OS, Public IP, City, Country, User, and Last activity. You can also click to show the coordinates on Google Maps.
Scrolling down you will see a detailed list of all the devices connected to your domain.
You can view their Shield UUID, which is a universally unique ID given to every user per device, the Shield CRX version, device org.unit, device serial number, device OS, the public & private IP, location details as well as the user’s email and last sync activity.
Clicking the marker button under the ‘Action’ tab will locate this user on the map.
The eye icon will give you more information about that user’s device, as well as details of their device such as CPU and memory usage.
In this example we’re going to search for any Windows devices that have more than one user logged into it, we’ll start off by clicking the filters button.
We’ll select OS and type the name of the operating system, in this example it’s Windows, we’ll then add another rule and select other users, we’ll pick ‘is not empty’ and apply the filter.
We now have the result, to see the other user who has logged into this device we’ll select the eye icon. We can now see that another user from a different domain has logged onto the same device as our user.
In our next example, we’ll look for how many devices a user has logged into, we’ll delete our filter and apply a new one, then we’ll select User and enter the email of the user we’re looking for.
We can see that this user has logged into five different devices. If we would like we can click the export data button and select between a direct CSV download or one to Google drive.
We’ll select Google Drive, a small window should appear. Simply click to view and download.
We can now see all the data from our search in the spreadsheet.
If you would like to know how we get Geo-location data visit this document