Cloud Monitor Setup (New)

Cloud Monitor monitors user activities, such as sharing or downloading files and links, on your organisation’s Microsoft 365 environment, including Exchange Online and SharePoint Online.

An Azure Global Administrator account is required to set up Cloud Monitor.

Cloud Monitor uses a registered Azure application and certificate-based authentication to securely access activity data from Microsoft 365. These data are then analysed within GuardWare INSIGHT to provide dashboards, alerts, and reports on cloud usage and potential security incidents.

It monitors key cloud events such as:

• Files accessed or downloaded from sensitive libraries

• Access and download actions by anonymous, invited, or mobile users

• Files accessed via links shared on Teams

• Creation of anonymous links and external file access activities

• SharePoint file access, download, and link creation activities

• Outgoing Microsoft 365 emails

To set up Cloud Monitor:

1. Log in to the GuardWare INSIGHT Management Console.

2. Click Open Management Console.

1. Navigate to Organisation and click Cloud Monitor Setup.

1. Click Setup. You’ll be asked to sign in with a Microsoft account.

2. Sign in with your Azure Global Administrator account. Once authenticated, the system automatically performs all necessary Azure configurations, including:

   1. Registering the GuardWare Cloud Monitoring Application in Azure

   2. Generating and uploading the required certificates

   3. Assigning the appropriate permissions and roles

   4. Storing the credentials (Client ID, Tenant ID, Domain, and Certificate details) securely in the database

3. After the application is registered, click Next. You’ll be asked to sign in again. The first sign-in registers the application in Azure, and the second allows you to select the security group to monitor.

   
4. Select a Security Group you want Cloud Monitor to monitor and click Save. You can update or change this group later if needed.

   

Once the setup is complete, Cloud Monitor starts monitoring cloud activities, which are then displayed in INSIGHT dashboards, reports, and alerts.