[MUSIC PLAYING]
FLETCHER: Hi, I'm Fletcher from the Chrome team.
And today, we'll be talking about BeyondCorp Enterprise
and Chrome.
BeyondCorp Enterprise is Google's zero-trust solution
that provides simple and secure access
to business-critical applications,
as well as advanced endpoint security.
With BeyondCorp Enterprise, organizations
can implement advanced protection for phishing,
malware, and set data leak prevention policies in Chrome.
To enable these capabilities, BeyondCorp Enterprise customers
can start by setting up Chrome Browser Cloud Management.
Once Chrome Browser Cloud Management is set up,
you can find the BeyondCorp settings
by clicking on the hamburger menu in the top-left corner
of the Google Admin homepage.
Then choose Devices and select Chrome.
Then select User and Browser Settings.
Type Chrome Enterprise under the filter
view and select Category Contains.
It is recommended that you select
your top-level organizational unit
so all organizational units underneath it
will inherit the policy.
To enable each feature, we're going
to select BeyondCorp Enterprise from the dropdown menu.
Enabling security event reporting
allows administrators to capture and view
threat summary reports on things like malware transfers,
unsafe site visits, and password reuse.
Upload content analysis provides protection
for uploads that could have potential malware
or break your data protection rules.
Download content analysis checks for sensitive data
and malware in user downloads.
Bulk text content analysis provides the ability
to scan text and prevent sensitive data
from being pasted from your user's clipboard on the web.
Real time URL check detects and prevent user visits
to malicious, phishing, or unsafe websites
by comparing the URLs to Google's Global Threat
Intelligence Database in real time.
Go ahead and Save your changes.
Now that the solution is enabled,
let's create a data loss prevention
rule that will look for US driver's license numbers
in uploads, downloads, and copied text.
Navigate to the hamburger menu in the top-left corner,
choose Security, then select Data Protection.
Click on Manage Rules, select Add Rule, and then New Rule.
Give your rule a name.
We'll title this rule US drivers licenses.
We will apply this to our whole organization,
but you could apply this to specific groups if you'd like.
Click Continue.
Next, select the events that will trigger the rule.
Let's select File Uploaded, Downloaded,
and Content Uploaded.
Now let's set the conditions.
Select all content that matches a default detector.
US driver's license is one of the many default
detectors that come built-in.
The confidence section is how you set the sensitivity
of the detection model.
We'll leave it as Likely for now,
and we can fine-tune the setting later on if needed.
The Minimum Unique Matches checks for the number
of unique items in the file.
If it's greater than what we've set here,
then the rule will be triggered.
Let's set it to 2.
The Match Count is the minimum number
of matches needed to trigger the rule,
regardless of if they are unique or not.
We will set this to 1.
Click Continue.
Under Actions, you can Block the Content, Warn the User,
or run silently in Audit Mode just
to get reporting on the behavior.
We're going to select Block Content.
Under Alerting, you can select the severity level.
Select if you want to Send to Alert Center
or if you want email notifications.
Click Continue.
Now our rule is all setup.
We can review our settings and hit Create.
Let's set it to Active and click Complete.
You've now set up a variety of threat and data protections
within Chrome.
With BeyondCorp Enterprise, you can provide simple and secure
access to applications and your users
will get the added protection from malware, phishing,
and data loss while they get their work done in the browser.
Learn more by visiting g.co/cloud/bce.
[MUSIC PLAYING]