Connect to a Cloud storage provider
Once the add-on is activated, you can connect FileAudit to one of these Cloud storage providers
- Dropbox Business Advanced Plan
- OneDrive for Business
- G-Suite Drive Business Plan (i.e. Google Drive for Business)
- In the Cloud Audit page, click on the “Connect” button of your provider
- Follow the instructions displayed in the page. You will be redirected to your provider web site in your default browser to continue the subscription process.
- You can now monitor your Cloud files access events in FileAudit.
Depending on the provider, some events may not be visible immediately in FileAudit. Box and Dropbox event notifications are sent in a few seconds while Google and Microsoft are significantly slower (between 5 and 15 minutes). For instance, according to Microsoft, “Webhook notifications aren't event-driven in the sense that the event triggers the notification. The content blob must still be created, and the creation of the content blob is what triggers the notification delivery”. So, this is not related to FileAudit but to the way these providers notify their partners.
Depending on the security settings of the server you're installing FileAudit on, you may experience some issues when configuring the audit on a cloud provider. This is due to the embedded browser in FileAudit which is affected by the Internet Options which are setup on the system. Some providers’ urls are automatically added to the Trusted Sites section of these settings to facilitate the user experience, but this is not always the case.
For instance, if you try to audit a Box subscription on a server where the Enhanced Security Configuration is Enabled, you'll end up on an error page. You may get a blank page if you simultaneously have activated the Identity Federation (using ADFS for instance) and the Windows Authentication.
Generally, in order to fix these issues, you can first try to disable the SuppressScriptErrors advanced setting (by pressing F7 when the FileAudit console is open). Once this is done, you may receive some of these script errors, but you will be able to add the missing urls manually to the Trusted Sites. If the problem persists, please read the FAQ ou contact technical support if no solution solves your issue.
Google Audit Activation:
If you face an issue while enabling the Google Drive audit, that may be because the access to Google API is restricted. In such cases, you will get an error message asking you to enable the API access. To do so, FileAudit needs to be added to the list of Trusted Apps.
Please read the following documentation: https://support.google.com/a/answer/7281227.
To complete the procedure, you will need the FileAudit ClientId:
Remove an audit
To remove an audit from a provider, click on a tile of a connected provider. Then click on the “Remove audit” button and confirm by clicking “ok”.
All existing access events already generated and stored in the database will still be available.