|
1 | 1 | --- |
2 | 2 | pcx_content_type: reference |
3 | | -title: Shadow IT Discovery |
| 3 | +title: Access analytics |
4 | 4 | sidebar: |
5 | | - order: 2 |
6 | | - |
| 5 | + order: 3 |
7 | 6 | --- |
8 | 7 |
|
9 | | -The Shadow IT Discovery page provides visibility into the SaaS applications and private network origins your end users are visiting. This information allows you to create identity and device-driven Zero Trust policies to secure your users and data. |
10 | | - |
11 | | -Shadow IT Discovery is located in [Zero Trust](https://one.dash.cloudflare.com) under **Analytics** > **Access**. |
12 | | - |
13 | | -## Turn on Shadow IT Discovery |
14 | | - |
15 | | -To allow Zero Trust to discover shadow IT in your traffic: |
16 | | - |
17 | | -* Turn on the [Gateway proxy](/cloudflare-one/policies/gateway/proxy/) for HTTP and network traffic. |
18 | | -* Turn on [TLS decryption](/cloudflare-one/policies/gateway/http-policies/tls-decryption/) to inspect HTTPS traffic. |
19 | | -* Ensure any network traffic you want to inspect is not routed around Gateway by a [Split Tunnel](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/). |
20 | | - |
21 | | -## SaaS applications |
22 | | - |
23 | | -To see an overview of SaaS applications your users have visited, go to **Analytics** > **Access** > **SaaS**. This tab displays the following information: |
24 | | - |
25 | | -* **Unique application users**: Chart showing the number of different users who accessed SaaS applications over time. |
26 | | -* **Top approved applications**: SaaS applications marked as [**Approved**](#approval-status) which had the greatest number of unique visitors. |
27 | | -* **Top unapproved applications**: SaaS applications marked as [**Unapproved**](#approval-status) which had the greatest number of unique visitors. |
28 | | -* **Zero Trust**: Metrics for your Access applications including the total number of accessed applications, failed logins, and connected users over the selected time period. |
29 | | -* **Logins**: Chart showing the number of logins for an individual Access application over time. |
30 | | -* **Top applications accessed**: Access applications with the greatest number of logins. |
31 | | -* **Top connected users**: Users who logged in to the greatest number of Access applications. |
32 | | - |
33 | | -### Review discovered applications |
34 | | - |
35 | | -You can view a list of all discovered SaaS applications and mark them as approved or unapproved. To review an application: |
36 | | - |
37 | | -1. Go to **Analytics** > **Access** > **SaaS**. |
38 | | -2. In the **Unique application users** chart, select **Review all**. The table displays the following fields: |
39 | | - |
40 | | - |
41 | | - |
42 | | -| Field | Description | |
43 | | -| ---------------- | ---------------------------------------------------------------------------------------------------------------------------- | |
44 | | -| Application | SaaS application's name and logo. | |
45 | | -| Application type | [Application type](/cloudflare-one/policies/gateway/application-app-types/#app-types) assigned by Cloudflare Zero Trust. | |
46 | | -| Status | Application's [approval status](#approval-status). | |
47 | | -| Secured | Whether the application is currently secured behind Cloudflare Access. | |
48 | | -| Users | Number of users who connected to the application over the period of time specified on the Shadow IT Discovery overview page. | |
49 | | -| | | |
50 | | - |
51 | | -3. Select a specific application to view details. |
52 | | -4. Assign a new [approval status](#approval-status) according to your organization's preferences. |
53 | | - |
54 | | -The application's status will now be updated across charts and visualizations on the **SaaS** tab. You can block unapproved applications by creating a [Gateway policy](/cloudflare-one/policies/gateway/). |
55 | | - |
56 | | -## Private network origins |
57 | | - |
58 | | -To see an overview of the private network origins your users have visited, go to **Analytics** > **Access** > **Private Network**. This tab displays the following information: |
59 | | - |
60 | | -* **Unique origin users**: Chart showing the number of different users accessing your private network over time. |
61 | | -* **Top approved origins**: Origins marked as [**Approved**](#approval-status) which had the greatest number of unique visitors. |
62 | | -* **Top unapproved origins**: Origins marked as [**Unapproved**](#approval-status) which had the greatest number of unique visitors. |
63 | | -* **Zero Trust**: Metrics for your Access applications including the total number of accessed applications, failed logins, and connected users over the selected time period. |
64 | | -* **Logins**: Chart showing the number of logins for an individual Access application over time. |
65 | | -* **Top applications accessed**: Access applications with the greatest number of logins. |
66 | | -* **Top connected users**: Users who logged in to the greatest number of Access applications. |
67 | | - |
68 | | -### Review discovered origins |
69 | | - |
70 | | -You can view a list of all discovered origins and mark them as approved or unapproved. To review a private network origin: |
71 | | - |
72 | | -1. Go to **Analytics** > **Access** > **Private Network**. |
73 | | -2. In the **Unique origin users** chart, select **Review all**. The discovered origins that appear on this page are defined by unique combinations of IP address, port, and protocol. |
74 | | - |
75 | | - |
76 | | - |
77 | | -| Field | Description | |
78 | | -| ---------- | ----------------------------------------------------------------------------------------------------------------------- | |
79 | | -| IP address | Origin's internal IP address in your private network. | |
80 | | -| Port | Port used to connect to the origin. | |
81 | | -| Protocol | Protocol used to connect to the origin. | |
82 | | -| Hostname | Hostname used to access the origin. | |
83 | | -| Status | Origin's [approval status](#approval-status) | |
84 | | -| Users | Number of users who connected to the origin over the period of time specified on the Shadow IT Discovery overview page. | |
85 | | - |
86 | | - |
| 8 | +Access analytics provide Cloudflare One users with data on how Access is protecting their network. |
87 | 9 |
|
88 | | -3. Select a specific origin to view details. |
89 | | -4. Assign a new [approval status](#approval-status) according to your organization's preferences. |
| 10 | +To view Access analytics in [Zero Trust](https://one.dash.cloudflare.com), go to **Analytics**, then select **Access**. |
90 | 11 |
|
91 | | -The origin's status will now be updated across charts and visualizations on the **Private Network** tab. You can block unapproved origins by creating a [Gateway policy](/cloudflare-one/policies/gateway/). |
| 12 | +You can view the following data and filters in Access analytics: |
92 | 13 |
|
93 | | -## Approval status |
| 14 | +**Zero Trust data:** |
94 | 15 |
|
95 | | -Within Shadow IT Discovery, applications are labeled according to their status. The default status for a discovered application is **Unreviewed**. Your organization can determine the status of each application and change their status at any time. |
| 16 | +- Applications accessed |
| 17 | +- Failed logins |
| 18 | +- Connected users |
96 | 19 |
|
97 | | -:::note |
| 20 | +**Logins over time:** |
98 | 21 |
|
99 | | -Approval status does not impact a user's ability to access the application. Users are allowed or blocked according to your Access and Gateway policies. |
100 | | -::: |
| 22 | +- Total count of all logins per day |
| 23 | +- Filter to see logins for a specific application |
101 | 24 |
|
| 25 | +**Applications and users:** |
102 | 26 |
|
| 27 | +- Top applications accessed |
| 28 | +- Top connected users |
103 | 29 |
|
104 | | -| Status | Description | |
105 | | -| ---------- | ------------------------------------------------------------------------------------------------------ | |
106 | | -| Approved | Applications that have been marked as sanctioned by your organization. | |
107 | | -| Unapproved | Applications that have been marked as unsanctioned by your organization. | |
108 | | -| In review | Applications in the process of being reviewed by your organization. | |
109 | | -| Unreviewed | Unknown applications that are neither sanctioned nor being reviewed by your organization at this time. | |
| 30 | +**Time filters:** |
110 | 31 |
|
| 32 | +- Last hour |
| 33 | +- Last 24 hours |
| 34 | +- Last 7 days |
| 35 | +- Last 30 days |
| 36 | +- Current calendar month |
0 commit comments