With the introduction of content scanning in the new BetterCloud interface, there are substantial changes to how documents with sensitive data are handled and acted upon in BetterCloud. This article will walk you through some of those changes, and assist in replicating your current policies from g.bettercloud.com to app.bettercloud.com using the newly available conditions.
- Customers that are currently using Drive in g.bettercloud.com will need to contact their Customer Success Manager to migrate over to the new platform.
- Content scanning is only available to customers on our Pro and Enterprise subscription levels.
Where can I carry out content scanning in app.bettercloud.com?
Content scanning is available using one of four alert templates available in the Alerts Manager. For content scanning that does not require you to target a specific exposure level, use the Sensitive Data Scanned alert template. To add content scanning to an alert that is already scoped by the file's exposure level, you can use one of the following alerts:
- Files Shared Publicly
- Files with Public Sharing Links
- Files Shared Externally
For a full guide to configuring these alerts, please see this help center article.
How do I create a policy based on content scanning?
Policies at app.bettercloud.com are created by configuring workflows that take automated action when they trigger. After configuring your alerts, you can then use them as workflow events, allowing you to trigger custom sets of actions based on the parameters you’ve already defined. For more on using an alert as a workflow trigger, please refer to this help center article.
How can I replicate my current conditions?
Most Drive Policy content conditions have a relatively direct analog in the Content Scanning conditions. For example, when searching for US social security numbers, the following condition in g.bettercloud.com:
Becomes this condition in app.bettercloud.com:
Here is a full list of all of the conditions and their closest equivalent setting. Please note that because the engine being used for content scanning is different and contains additional validation, you might see some minor discrepancies in which files are picked up between the two interfaces. Content Scanning conditions for app.bettercloud.com are listed in the format Region / Category / Information Type below:
Keyword - There is no equivalent condition for keyword yet, but it is in the pipeline. Please stay tuned for a future release!
Personal Information / SSN - United States / General PII / U.S. Social Security Number (SSN)
Personal Information / US Zip Codes - No equivalent condition
Personal Information / US Phone Numbers - *All / General PII / Phone Number
Personal Information / Email Addresses - *All / General PII / Email Address
Payment Information / All Credit Cards - *All / Financial / Credit Card
Payment Information / Visa - No equivalent condition. Please use the *All / Financial / Credit Card condition instead
Payment Information / Mastercard - No equivalent condition. Please use the *All / Financial / Credit Card condition instead
Payment Information / American Express - No equivalent condition. Please use the *All / Financial / Credit Card condition instead
Payment Information / Discover - No equivalent condition. Please use the *All / Financial / Credit Card condition instead
Profanity - *All / Other / Profanity
Regular Expression - There is no equivalent condition for regular expressions yet, but it is in the pipeline. Please stay tuned for a future release!
Can I use additional conditions with content scanning like I have in my Drive Policies?
Yes! The Sensitive Data Scanned alert supports additional conditions, available under the Alert Trigger Conditions section.
You may add up to two additional conditions to any custom alert. You can also add content scanning conditions to the File Shared Externally alert to only scan files that have been shared externally.
Can I still run a historical audit for sensitive data?
Content scanning at app.bettercloud.com is currently from this point forward, meaning it will only scan documents that are edited after the alert is configured. Historical scans are in the pipeline, so please stay tuned!
With this release, we're excited to announce some new features that will enhance your Google Drive experience that were not achievable in g.bettercloud.com!
It is now possible to view a masked version of the violation string. This will allow you to see the text that caused the document to be a violation. Additionally, you are able to view the number of violations per document.
Private File Scanning
In g.bettercloud, you were unable to scan documents that were shared privately. Now we give you the option to include these documents in your policies if you wish!
Please note: By enabling this option, scans could take significantly longer to process. In addition any "Shared With" conditions will be removed from this alert.
For more information on what you can do with our new content scanning functionality, please refer to this help center article.