[MUSIC PLAYING]
BRAD MEADOR: Welcome to the Google Cloud Security Showcase,
a special web series where we'll focus on security use cases
that customers can solve with G Suite and Cloud Identity.
My name is Brad, and I'm a product manager
at Google Cloud.
Today we'll be walking through one of the top questions we get
from customers, how do I manage and control
mobile and desktop devices accessing G Suite?
My team's mission is to secure every device that
accesses enterprise data.
We want to make this as easy as possible for both
the admin and the end user.
To ensure day zero protection of every device that
accesses your data, we provide agent lists default ON
management of both mobile and desktop devices out of the box
to all of our G Suite and Cloud Identity customers,
ensuring a blanket of protection across all endpoints.
For mobile, we do that through MDM Basic by default.
This gives an inventory of Android and iOS devices,
allowing passcode enforcement on all devices that
touch G Suite data.
I'm going to show you that now.
Here's a list of all of our mobile devices,
and I'm going to filter for a user named Easy
because we like easy.
Hang on one second.
There we go.
You can see Easy's not located here now.
We're going to go over to an iPhone.
I'm going to log in.
You're going to note that this iPhone already
has a passcode enabled.
And we're going to log into Gmail for the first time.
So as we log in with that account Easy,
the active login to the account is
going to register this device with Google MDM.
We're going to check to see if there's a passcode.
There happens to be a passcode, so we're not going
to have to enforce it here.
And now if I go back over and we refresh,
you're going to see that this device is now listed
as in my device inventory.
I can open it up, and I can see some details
about the device-- management level, device ID,
user ownership, et cetera.
Should the device become lost or stolen,
I now have the ability to wipe the device.
So we can go and we can wipe the account, and the next time
that the Gmail tries to sync, it will become wiped.
Now I can force a sync here, and that
will cause it to manually wipe.
There you can see that it's been wiped.
So basic MDM is on by default for all G Suite customers.
Switching to desktop management, we
have recently launched default ON fundamental desktop security
to inventory all desktop access to G Suite and Cloud Identity
accounts.
With fundamental security, admins
can view an inventory of desktop devices
that access their corporate systems and remote sign
out users from those devices should
they become lost or stolen.
So here I'm showing a list of my devices
that have accessed G Suite in my device listing page.
And you can see it's showing a Chrome device here,
but it's not showing a Mac device, which I'm logged in on.
Now I'm going to switch over to Safari--
and Safari, I'm now logging into Gmail.
So as I log into Gmail, I hit Next.
This is going to pull up Gmail.
Now I'm in Gmail.
And now when I go back to Chrome and I refresh my account here,
we should show that we have logged this Mac device.
This Mac device now shows.
Some information is managed by fundamental security.
It shows when it's synced, it shows some device information
and user ownership, and it shows the user
that it's accessed from this device.
And what I can do is I can remote
sign out this user from here, and it gives me a warning.
I sign out the user.
I'm going to flip back over to Safari.
The next time that Gmail syncs in the background,
it will automatically sign out this account,
or I can force the refresh here.
And as we force the refresh, it will automatically
sign out the account.
Boom, we're out.
Fundamental security has recently been launched,
and it's slowly being deployed to all G Suite and Cloud
Identity customers.
This is available for Windows, Mac, Chrome OS, and Linux.
And it's triggered when logging in from any browser,
including Chrome, Safari, Edge, and Firefox.
Our suite of features extends beyond these default
ON products.
For customers who have greater access and control needs,
we provide advanced mobile and desktop management, as well.
Thank you for tuning in.
Please visit cloud.google.com/security
for more content from Google Cloud experts.
[MUSIC PLAYING]