google apps, computers and file server activity monitoring

Ambarishrh

Got a requirement from one of my clients to look for solutions that can monitor google apps email (email sent to domains others than theirs, specific file types, and file sizes- needs to get notified to the MD), monitor computer activities as and when needed, no need to keep this on for all employees all the time, just in case if anything suspicious, turn it on get the user activity as video recorded and check) and also file server activity. The client is dealing with banks and thats why he requires these. All employees will be informed about this as well, but won't be sharing the depth of info being monitored.

Just trying to find the most cost effective (not necessarily free, if a good solution comes with a price he is ok, but don't want to pay a massive fee just to get few features)

So far, I found:

For google apps mail monitoring: Objectionable content setting (Not sure how effective this can be)
https://support.google.com/a/answer/1346936?hl=en

or
http://www.spectorsoft.com/products/360-recon/ (mainly because of the keyword alert option and extensive tracking options like Document Tracking, Email tracking, user activity )

or
http://www.spectorcne.com/features

Computer monitoring: Either use Spectorsoft which can do both or
http://activtrak.com/
I've used this previously, its easy to deploy and can be monitored from the web.

3.File server activity monitoring: Probably manage engine would be easier

Any other products you guys used/suggest?

Apart from that there are basic requirements like block USB, CD etc which I think should be done via AD GP

doyle.jack

Hi @Ambarishrh,

I work for SpectorSoft and would be happy to answer any questions that you have about Spector 360 (including Recon) or Spector CNE.

Looking over your requirements, you should be able to monitor most of what you are wanting to with Spector 360. The one thing I don't think we will be able to help you with will be the email attachments on Webmail as we currently do not Record (monitor) those. Everything else looks like it would be a good fit.

As far as for file server activity, we record (again, monitor) everything from the perspective of the client computer. We call it Document Tracking and it can record what files are created, deleted, edited or renamed on local storage, network storage, removable and cloud storage. We currently support OneDrive, Google Drive and Dropbox.

As far as being able to go back and review video, we record screenshots of the users' computers. By default, these screenshots are recorded every thirty seconds and in a grayscale format. Grayscale works very nicely and is a great tradeoff between clarity and space required to store them. It looks similar to an old black and white television. However, you can change them to be full color if you prefer. You can also change the interval at which they are taken and add other "events" that would trigger additional pictures to be taken. For example, the presence of certain key words or phrases, specific keys pressed, web pages loaded, program started, etc.

Again, if you have any questions, please let me know and I'd be happy to help. There is both an evaluation and an online "test drive" for Spector 360 available here.

Ambarishrh

@doyle.jack Thanks a lot for the details. Is there any comparison table I could get to see the difference between all products from Spector?

As mentioned in my post, the client wants to get notified on emails and I think the Spector Recon does that. (Application Usage, Chat / IM, Email, FTP Transfers, Removable Device Usage) Am I getting the same features on Spector 360 as well?

afalcon

It sounds like you are looking for a few different solutions.

For computer activity ... really a broad spectrum Data Loss Prevention system ... we partner with Awareness Technologies and their LinkGuard product line.

Google Apps Vault will archive and let you search/discovery all email activity. BetterCloud has some real-time monitoring capabilities, but you won't be able to look at attributes such as attachment or attachment size. Google Apps for Work has some inbound and outbound monitoring/compliance rules that can block or modify certain email traffic.

If you are looking at tracking data in Google Drive, both BetterCloud and CloudLock monitor access permissions and ownership, and can change permissions based on defined rules and policies. If you want to manage check-in/out of documents, AODocs brings you that capability.

-- Allen