GAT Shield Downloads allows admins to view and manage all downloads made domain-wide.
Here’s the video format of this post:
In the download section, you can view all files which have been downloaded by your users through their Chrome browsers.
You can view the URL date download the files from, the format of the file, where it is stored, the size, when Download started, and when it finished. As well as who downloaded the file.
Let’s use a filter to find a specific set of results. Using the ‘apply filters’ button, We’ll create a filter to search for a specific OU. You can also search for specific files, groups, formats and more. In this example, We’ll look for downloads from my ‘Marketing’ OU to contain a zip file type.
Clicking on the ‘eye’ icon will allow you to see all the details pertaining to that download. Here you will have access to the GAT shield instance details. the GAT Shield UUID is a unique ID given to every user per device.
We’ll go ahead and copy this UUID and go to the user device geo reporting section. We can create a filter and use the Shield UUID filter and paste in the ID.
Now we have received information about the shield version the user was running, the serial number if they are using a Chromebook and the OS of the device. We can also get their public IP private IP and geolocation information such as city and country.
This example can help you find what device the file was downloaded on.
You can also take proactive measures to curb the downloading of files you deem unsafe.
To do this, select the alert rules section.
Here We’ll add a rule for downloads. We’ll name my rule EXE and PNG blocked. In the fall extension box, We’ll put EXE and PNG separated with a semicolon.
Checking to cancel the delete download box will prevent the download from happening.
And if it’s already downloaded it will be deleted, we can then apply these rules to a user group or OU. You can also exclude a user group or OU from this rule in the end-user action.
You can pick what will happen if a user violates this rule.
You can check the report file name, screen capture, and webcam capture to see who downloaded the file and what their screen and webcam were capturing at the time of the download.
You can also Allowlist certain web pages where this rule will not apply. If you uncheck to cancel the delete download button but have any reports checked you will only receive a report instead of interrupting to download.
That concludes this GAT Shield how-to.