Skip to content

Commit 9bc675a

Browse files
cdraper-cloudflarecdraper-cloudflare
committed
Update CF1 insights > anayltics to include new CF1 overview page and the existing Access analytics
1 parent 68400b9 commit 9bc675a

File tree

4 files changed

+264
-95
lines changed

4 files changed

+264
-95
lines changed

‎src/content/docs/cloudflare-one/insights/analytics/access.mdx‎

Lines changed: 25 additions & 94 deletions
Original file line numberDiff line numberDiff line change
@@ -1,110 +1,41 @@
11
---
2-
pcx_content_type: reference
3-
title: Shadow IT Discovery
2+
pcx_content_type: concept
3+
title: Access analytics
44
sidebar:
5-
order: 2
5+
order: 3
66

77
---
88

9-
The Shadow IT Discovery page provides visibility into the SaaS applications and private network origins your end users are visiting. This information allows you to create identity and device-driven Zero Trust policies to secure your users and data.
9+
Access analytics provides Cloudflare One customers with data on how Access is protecting their network.
1010

11-
Shadow IT Discovery is located in [Zero Trust](https://one.dash.cloudflare.com) under **Analytics** > **Access**.
11+
Go to Access analytics by:
1212

13-
## Turn on Shadow IT Discovery
13+
1. Opening the Cloudflare Zero Trust dashboard
14+
2. Selecting **Analytics** in the left side menu
15+
3. Selecting the **Access** tab
1416

15-
To allow Zero Trust to discover shadow IT in your traffic:
17+
Customers can view the following data and filters in Access analytics:
1618

17-
* Turn on the [Gateway proxy](/cloudflare-one/policies/gateway/proxy/) for HTTP and network traffic.
18-
* Turn on [TLS decryption](/cloudflare-one/policies/gateway/http-policies/tls-decryption/) to inspect HTTPS traffic.
19-
* Ensure any network traffic you want to inspect is not routed around Gateway by a [Split Tunnel](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/).
19+
**Zero Trust data:**
2020

21-
## SaaS applications
21+
* Applications accessed
22+
* Failed logins
23+
* Connected users
2224

23-
To see an overview of SaaS applications your users have visited, go to **Analytics** > **Access** > **SaaS**. This tab displays the following information:
25+
**Logins overtime:**
2426

25-
* **Unique application users**: Chart showing the number of different users who accessed SaaS applications over time.
26-
* **Top approved applications**: SaaS applications marked as [**Approved**](#approval-status) which had the greatest number of unique visitors.
27-
* **Top unapproved applications**: SaaS applications marked as [**Unapproved**](#approval-status) which had the greatest number of unique visitors.
28-
* **Zero Trust**: Metrics for your Access applications including the total number of accessed applications, failed logins, and connected users over the selected time period.
29-
* **Logins**: Chart showing the number of logins for an individual Access application over time.
30-
* **Top applications accessed**: Access applications with the greatest number of logins.
31-
* **Top connected users**: Users who logged in to the greatest number of Access applications.
27+
* Total count of all logins per day
28+
* Filter to see logins for a specific application
3229

33-
### Review discovered applications
30+
**Applications and users:**
3431

35-
You can view a list of all discovered SaaS applications and mark them as approved or unapproved. To review an application:
32+
* Top applications accessed
33+
* Top connected users
3634

37-
1. Go to **Analytics** > **Access** > **SaaS**.
38-
2. In the **Unique application users** chart, select **Review all**. The table displays the following fields:
39-
40-
41-
42-
| Field | Description |
43-
| ---------------- | ---------------------------------------------------------------------------------------------------------------------------- |
44-
| Application | SaaS application's name and logo. |
45-
| Application type | [Application type](/cloudflare-one/policies/gateway/application-app-types/#app-types) assigned by Cloudflare Zero Trust. |
46-
| Status | Application's [approval status](#approval-status). |
47-
| Secured | Whether the application is currently secured behind Cloudflare Access. |
48-
| Users | Number of users who connected to the application over the period of time specified on the Shadow IT Discovery overview page. |
49-
| | |
50-
51-
3. Select a specific application to view details.
52-
4. Assign a new [approval status](#approval-status) according to your organization's preferences.
53-
54-
The application's status will now be updated across charts and visualizations on the **SaaS** tab. You can block unapproved applications by creating a [Gateway policy](/cloudflare-one/policies/gateway/).
55-
56-
## Private network origins
57-
58-
To see an overview of the private network origins your users have visited, go to **Analytics** > **Access** > **Private Network**. This tab displays the following information:
59-
60-
* **Unique origin users**: Chart showing the number of different users accessing your private network over time.
61-
* **Top approved origins**: Origins marked as [**Approved**](#approval-status) which had the greatest number of unique visitors.
62-
* **Top unapproved origins**: Origins marked as [**Unapproved**](#approval-status) which had the greatest number of unique visitors.
63-
* **Zero Trust**: Metrics for your Access applications including the total number of accessed applications, failed logins, and connected users over the selected time period.
64-
* **Logins**: Chart showing the number of logins for an individual Access application over time.
65-
* **Top applications accessed**: Access applications with the greatest number of logins.
66-
* **Top connected users**: Users who logged in to the greatest number of Access applications.
67-
68-
### Review discovered origins
69-
70-
You can view a list of all discovered origins and mark them as approved or unapproved. To review a private network origin:
71-
72-
1. Go to **Analytics** > **Access** > **Private Network**.
73-
2. In the **Unique origin users** chart, select **Review all**. The discovered origins that appear on this page are defined by unique combinations of IP address, port, and protocol.
74-
75-
76-
77-
| Field | Description |
78-
| ---------- | ----------------------------------------------------------------------------------------------------------------------- |
79-
| IP address | Origin's internal IP address in your private network. |
80-
| Port | Port used to connect to the origin. |
81-
| Protocol | Protocol used to connect to the origin. |
82-
| Hostname | Hostname used to access the origin. |
83-
| Status | Origin's [approval status](#approval-status) |
84-
| Users | Number of users who connected to the origin over the period of time specified on the Shadow IT Discovery overview page. |
85-
86-
87-
88-
3. Select a specific origin to view details.
89-
4. Assign a new [approval status](#approval-status) according to your organization's preferences.
90-
91-
The origin's status will now be updated across charts and visualizations on the **Private Network** tab. You can block unapproved origins by creating a [Gateway policy](/cloudflare-one/policies/gateway/).
92-
93-
## Approval status
94-
95-
Within Shadow IT Discovery, applications are labeled according to their status. The default status for a discovered application is **Unreviewed**. Your organization can determine the status of each application and change their status at any time.
96-
97-
:::note
98-
99-
Approval status does not impact a user's ability to access the application. Users are allowed or blocked according to your Access and Gateway policies.
100-
:::
101-
102-
103-
104-
| Status | Description |
105-
| ---------- | ------------------------------------------------------------------------------------------------------ |
106-
| Approved | Applications that have been marked as sanctioned by your organization. |
107-
| Unapproved | Applications that have been marked as unsanctioned by your organization. |
108-
| In review | Applications in the process of being reviewed by your organization. |
109-
| Unreviewed | Unknown applications that are neither sanctioned nor being reviewed by your organization at this time. |
35+
**Time filters:**
11036

37+
* Last hour
38+
* Last 24 hours
39+
* Last 7 days
40+
* Last 30 days
41+
* Current calendar month

‎src/content/docs/cloudflare-one/insights/analytics/analytics-overview.mdx‎

Lines changed: 128 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,128 @@
1+
---
2+
pcx_content_type: concept
3+
title: Analytics overview
4+
sidebar:
5+
order: 2
6+
7+
---
8+
9+
The Cloudflare One Analytics Overview provides you with a single pane of glass that reports on how Cloudflare One is protecting their network.
10+
11+
Go to the Analytics overview by:
12+
13+
1. Opening the Cloudflare Zero Trust dashboard
14+
2. Selecting **Analytics** in the left side menu
15+
16+
The Analytics overview includes reports and insights across the following products and categories:
17+
18+
* Cloudflare One - Global status
19+
* Access
20+
* Gateway - HTTP traffic
21+
* Gateway - Network traffic
22+
* Gateway - DNS traffic
23+
* Gateway - Firewall policies
24+
25+
## Cloudflare One - Global status
26+
27+
You can view a report on Cloudflare One adoption and usage that contains:
28+
29+
**Metrics:**
30+
31+
* Access apps configured
32+
* Gateway HTTP policies
33+
* Gateway network policies
34+
* Gateway DNS policies
35+
* SaaS integrations
36+
* DLP profiles
37+
38+
You can also view a report on seat usage across your Cloudflare One organization that contains:
39+
40+
**Metrics:**
41+
42+
* Total seats
43+
* Used seats
44+
* Unused seats
45+
46+
## Access
47+
48+
You can view a report on Access that contains:
49+
50+
**Filters:**
51+
52+
* Access data by country
53+
54+
**Metrics:**
55+
56+
* Total access attempts
57+
* Granted access
58+
* Denied (policy violation)
59+
* Active logins overtime
60+
* Top applications with most logins
61+
62+
## Gateway - HTTP traffic
63+
64+
You can view a report on Gateway HTTP traffic (titled **Proxy traffic**) that contains:
65+
66+
**Filters:**
67+
68+
* Gateway HTTP traffic data by country
69+
70+
**Metrics:**
71+
72+
* Total requests overtime
73+
* Allowed requests
74+
* Blocked requests
75+
* Isolated requests
76+
* Do not inspect requests
77+
* Top bandwidth consumers (GB)
78+
* Top denied users
79+
80+
## Gateway - Network traffic
81+
82+
You can view a report on Gateway Network traffic (titled Gateway (network requests)) that contains:
83+
84+
**Filters:**
85+
86+
* Gateway network traffic data by country
87+
88+
**Metrics:**
89+
90+
* Total sessions
91+
* Authenticated sessions
92+
* Blocked sessions
93+
* Audit SSH sessions
94+
* Allowed sessions
95+
* Override sessions
96+
* Top bandwidth consumers (GB)
97+
* Top denied users
98+
99+
## Gateway - DNS traffic
100+
101+
You can view a report on Gateway DNS traffic that contains:
102+
103+
**Filters:**
104+
105+
* Gateway DNS traffic by query type
106+
* Gateway DNS traffic by country
107+
108+
**Metrics:**
109+
110+
* Total DNS queries
111+
* Allowed DNS queries
112+
* Blocked DNS queries
113+
* Override DNS queries
114+
* Safe Search DNS queries
115+
* Restricted DNS queries
116+
* Other DNS queries
117+
118+
## Gateway - Firewall policies
119+
120+
You can view a report on Gateway Firewall policies (titled **Gateway insights**) that contains:
121+
122+
**Metrics:**
123+
124+
* Top domain blocking policies
125+
* Top destination domains
126+
* Most user queries
127+
* Top devices
128+
* Top countries

‎src/content/docs/cloudflare-one/insights/analytics/gateway.mdx‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
pcx_content_type: concept
33
title: Gateway analytics
44
sidebar:
5-
order: 3
5+
order: 4
66

77
---
88

‎src/content/docs/cloudflare-one/insights/analytics/shadow-it.mdx‎

Lines changed: 110 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,110 @@
1+
---
2+
pcx_content_type: reference
3+
title: Shadow IT Discovery
4+
sidebar:
5+
order: 5
6+
7+
---
8+
9+
The Shadow IT Discovery page provides visibility into the SaaS applications and private network origins your end users are visiting. This information allows you to create identity and device-driven Zero Trust policies to secure your users and data.
10+
11+
Shadow IT Discovery is located in [Zero Trust](https://one.dash.cloudflare.com) under **Analytics** > **Access**.
12+
13+
## Turn on Shadow IT Discovery
14+
15+
To allow Zero Trust to discover shadow IT in your traffic:
16+
17+
* Turn on the [Gateway proxy](/cloudflare-one/policies/gateway/proxy/) for HTTP and network traffic.
18+
* Turn on [TLS decryption](/cloudflare-one/policies/gateway/http-policies/tls-decryption/) to inspect HTTPS traffic.
19+
* Ensure any network traffic you want to inspect is not routed around Gateway by a [Split Tunnel](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/).
20+
21+
## SaaS applications
22+
23+
To see an overview of SaaS applications your users have visited, go to **Analytics** > **Access** > **SaaS**. This tab displays the following information:
24+
25+
* **Unique application users**: Chart showing the number of different users who accessed SaaS applications over time.
26+
* **Top approved applications**: SaaS applications marked as [**Approved**](#approval-status) which had the greatest number of unique visitors.
27+
* **Top unapproved applications**: SaaS applications marked as [**Unapproved**](#approval-status) which had the greatest number of unique visitors.
28+
* **Zero Trust**: Metrics for your Access applications including the total number of accessed applications, failed logins, and connected users over the selected time period.
29+
* **Logins**: Chart showing the number of logins for an individual Access application over time.
30+
* **Top applications accessed**: Access applications with the greatest number of logins.
31+
* **Top connected users**: Users who logged in to the greatest number of Access applications.
32+
33+
### Review discovered applications
34+
35+
You can view a list of all discovered SaaS applications and mark them as approved or unapproved. To review an application:
36+
37+
1. Go to **Analytics** > **Access** > **SaaS**.
38+
2. In the **Unique application users** chart, select **Review all**. The table displays the following fields:
39+
40+
41+
42+
| Field | Description |
43+
| ---------------- | ---------------------------------------------------------------------------------------------------------------------------- |
44+
| Application | SaaS application's name and logo. |
45+
| Application type | [Application type](/cloudflare-one/policies/gateway/application-app-types/#app-types) assigned by Cloudflare Zero Trust. |
46+
| Status | Application's [approval status](#approval-status). |
47+
| Secured | Whether the application is currently secured behind Cloudflare Access. |
48+
| Users | Number of users who connected to the application over the period of time specified on the Shadow IT Discovery overview page. |
49+
| | |
50+
51+
3. Select a specific application to view details.
52+
4. Assign a new [approval status](#approval-status) according to your organization's preferences.
53+
54+
The application's status will now be updated across charts and visualizations on the **SaaS** tab. You can block unapproved applications by creating a [Gateway policy](/cloudflare-one/policies/gateway/).
55+
56+
## Private network origins
57+
58+
To see an overview of the private network origins your users have visited, go to **Analytics** > **Access** > **Private Network**. This tab displays the following information:
59+
60+
* **Unique origin users**: Chart showing the number of different users accessing your private network over time.
61+
* **Top approved origins**: Origins marked as [**Approved**](#approval-status) which had the greatest number of unique visitors.
62+
* **Top unapproved origins**: Origins marked as [**Unapproved**](#approval-status) which had the greatest number of unique visitors.
63+
* **Zero Trust**: Metrics for your Access applications including the total number of accessed applications, failed logins, and connected users over the selected time period.
64+
* **Logins**: Chart showing the number of logins for an individual Access application over time.
65+
* **Top applications accessed**: Access applications with the greatest number of logins.
66+
* **Top connected users**: Users who logged in to the greatest number of Access applications.
67+
68+
### Review discovered origins
69+
70+
You can view a list of all discovered origins and mark them as approved or unapproved. To review a private network origin:
71+
72+
1. Go to **Analytics** > **Access** > **Private Network**.
73+
2. In the **Unique origin users** chart, select **Review all**. The discovered origins that appear on this page are defined by unique combinations of IP address, port, and protocol.
74+
75+
76+
77+
| Field | Description |
78+
| ---------- | ----------------------------------------------------------------------------------------------------------------------- |
79+
| IP address | Origin's internal IP address in your private network. |
80+
| Port | Port used to connect to the origin. |
81+
| Protocol | Protocol used to connect to the origin. |
82+
| Hostname | Hostname used to access the origin. |
83+
| Status | Origin's [approval status](#approval-status) |
84+
| Users | Number of users who connected to the origin over the period of time specified on the Shadow IT Discovery overview page. |
85+
86+
87+
88+
3. Select a specific origin to view details.
89+
4. Assign a new [approval status](#approval-status) according to your organization's preferences.
90+
91+
The origin's status will now be updated across charts and visualizations on the **Private Network** tab. You can block unapproved origins by creating a [Gateway policy](/cloudflare-one/policies/gateway/).
92+
93+
## Approval status
94+
95+
Within Shadow IT Discovery, applications are labeled according to their status. The default status for a discovered application is **Unreviewed**. Your organization can determine the status of each application and change their status at any time.
96+
97+
:::note
98+
99+
Approval status does not impact a user's ability to access the application. Users are allowed or blocked according to your Access and Gateway policies.
100+
:::
101+
102+
103+
104+
| Status | Description |
105+
| ---------- | ------------------------------------------------------------------------------------------------------ |
106+
| Approved | Applications that have been marked as sanctioned by your organization. |
107+
| Unapproved | Applications that have been marked as unsanctioned by your organization. |
108+
| In review | Applications in the process of being reviewed by your organization. |
109+
| Unreviewed | Unknown applications that are neither sanctioned nor being reviewed by your organization at this time. |
110+

0 commit comments

Comments
 (0)