Category: Google Apps for Business

Security Alert: Protect Your Google Apps Account from Being Hacked

Data Protection
Over the past 4 to 6 weeks, we have seen an alarming increase in the number of Google Apps accounts that have been “hacked” across both our business and education customers.

Google Apps security is NOT the issue.  ALL of the hacked accounts are due to compromised user identities.

In every case we have encountered, the users have used their Google Apps email address and password with another service that has had a breach, or has had malware on their computer that provided username and password keystrokes to the hackers.

In both types of incidents, hackers then log in as the user and cause mayhem.

We strongly recommend the following actions:

1) Educate your users that they are not to use their Google Apps password for any other account not explicitly authorized. Users should also not use their Google Apps email address as the username for personal accounts with other services.

2) Check Your Systems for malware and make sure your endpoint protection is up to the task. If not, we recommend Webroot Endpoint Protection and Web Security Services (the link is to our edu site, but the service is available to business and government customers as well).

3)  Implement Two-Factor Authentication (2FA).  In business environments, users should be using 2FA to secure their accounts.  Implementation can be involved if you have other services linked to Google Apps, as you will need to generate service-specific passwords.

In education environments, 2FA is not practical for all users, as students and many faculty members may not have mobile devices available to access the Authenticator.  For schools, we recommend any user with partial or full administrative privileges have 2FA active.


Activating 2FA is covered by our support agreements.

For customers and others without support agreements, mention this blog post and we will discount our hourly support fee by 10%; W

We will discount Webroot deployment fees by 50%.  

Both offers expire on December 31, 2014.

Please contact our Service Desk for 2FA assistance; contact Sales regarding Webroot.

 

Read More →



Hangouts and Chromebox for Meetings Grow Up


Based on customer and user feedback, Google announced today a set of major improvements for both Hangouts within Google Apps and Chromebox for Meetings.

Hangout Updates

  • Hangouts is now a core Google Apps for Business product, covered under the full Terms of Service that supports Gmail, Drive, Sites, and other core services.  This means that Hangouts are eligible for Google’s support, 99.9% uptime guarantee, and is ISO 270001, SSAE 16/ISAE 4302, and SOC-2 certified.
  • Google Apps account users can now include up to 15 full participants without creating a Google+ Profile.
  • New partners, like Blue Jeans, enable people on traditional video conferencing systems to join video meetings.

Chromebox for Meetings

  • You can now connect two displays to one Chromebox for Meetings device, so you can see your audience and your projected presentation/screen at the same time.
  • From the Google Apps Admin Console, IT admins can better manage meetings, including: remotely starting meetings, muting, and hanging up meetings.

You can learn more about these features on Google’s Official Enterprise Blog post.

If you want to better understand how Hangouts and Chromebox for Meetings can help your business, please send us a note.

 

 

 

 

Read More →



Chromebook SSO Eases Access Administration

google-chromebook
Single Sign-On (SSO) enables users to access multiple systems and applications with a single username and password, and a single login screen.  And while many schools and businesses use SSO for Google Apps and related solutions, Chrome devices have always required a separate login.

To easy access administration and simplify user logins, Google has launched SAML-based SSO login for Chrome devices.   Organizations running current versions of Chrome on devices registered via Chrome Management licenses can now extend their Google Apps SSO login to the registered Chrome devices.

Feel free to contact us if you would like more information or assistance with your setup.

 

Read More →



Drive vs Docs = New Google URLs

google drive
Google Drive and Google Docs are no longer the same thing.  As Google expanded the file service capabilities of Drive, Docs and Drive were separated to better reflect Docs as the office productivity tools and Drive as the secure file service.

Recently, Google made changes to ensure this distinction is evident in the URLs we use to access these services.

  • drive.google.com still points to Google Drive, and drive.google.com/a/<domain> still takes you to your Google Drive page
  • docs.google.com will soon point to a new Google Docs homepage that takes you directly to the Google Doc apps

We recommend updating your bookmarks as well as your custom URL mappings.

If you need a hand with your custom URL mappings, please let us know.

Read More →



Restore Google Drive Files Offers Some (but not enough?) Protection

google drive
Among the myriad of new features and upgrades announced at Google I/O this week, Google added the ability to restore users’ Drive files that have been deleted from the Trash folder.

While offering some protection, the feature is limited in its scope.

  • You cannot restore individual files; you can only restore all files deleted within a date range you provide.  The minimum date range is 1 day (24 hours).
  • You can only restore files for individual users, one at a time.
  • You can only restore files that were deleted from Trash within 25 days.
  • When restoring files, the permissions are not restored.  Only the user will have access to the files.

With these limitations, we do not expect the ability to restore a user’s Google Drive files will be of great use to most organizations.  With a limited retention period and lack of granularity, the tool provides a big shovel when most users need a spoon.

The solution also depends on users’ ability to recover information from the Trash folder, a process we find difficult at times due to the limited ability to search Trash in Drive.

True backup/recovery solutions give users and administrators that critical features that deliver more usability and effectiveness:

  • Flexible retention:  Allow organizations to implement policies related document and records management, including extended retention and removal of data past retention windows.
  • File-Level / Item-Level Restore: Most data loss and restore needs result from human error or action and impact fewer than 5 files.  Acceptable restore capabilities include the ability to restore individual files (or entire accounts) and should include the ability to select file by version or point in time.
  • Protect Meta Data:  Protect the meta data as well as the files themselves.  File ownership, permissions, etc. should be preserved and recoverable with the file.
  • Data Export:  Provide the ability to export data so that it may be migrated to other accounts and/or other systems.
  • Administrative Control:  Identify and allow backup/restore administrators that are not full domain administrators.

Absent many of these features, the ability within Google Apps to restore a user’s Drive files is a limited feature that will not meet most organizations’ needs for data protection.

Third party backup/restore solutions are still a necessary and appropriate component of a robust Google Apps environment.

Feel free to contact us if you would like to explore backup/recovery options and solutions.

Read More →





Moving from SBS? 6 Questions to Ask

NoWindows
Back in 2012, Microsoft announced the end of life for the Small Business Server (SBS) product line (see SBS End of Life: Microsoft Punishes Small Businesses).  As with any retiring technologies, some organizations will wait to move until there is a current need.  If something works, why fix it?

With Windows XP and Windows Server 2003 reach end of life as well, many are taking a new look at whether now is the time to move.

Here are 6 questions to ask before you make the move.

1) Does cloud-based email work for your business?

While many focus on why you should NOT move to cloud-based email, services like Google Apps for Business provide the security and privacy controls — and support encryption and other services — needed to meet pretty much any data protection requirement.

Focus on the value cloud-based email can provide to your business.

  • Secure access to email, from any device, at any time
  • Built in spam/virus protection
  • No monthly updates
  • No local queue errors
  • No VPN or additional web server needed
  • Affordable options for archiving, encryption, and backup/restore

2) What is the total cost of ownership?

When upgrading from SBS, organizations will need to purchase new 64-bit server hardware with additional disk space, new versions of Windows Server, new Windows CALs, Exchange Server Licenses, new Exchange CALs.  They will also need to purchase or upgrade their spam/virus protection solution and backup/recovery system.

Beyond the purchase, Microsoft still requires administrators to update software monthly — often multiple times each month — in order to maintain security patches and updates.

Moving to the cloud, organizations skip the large capital expenditure.  Cloud-based email solutions are operating expenses.  Costs are tied to the number of users, not to the amount of capacity you may use in the future.

When moving organizations to Google Apps for Business, we see customers saving 30% to as much as 70% over 3 year and 5 year TCO cycles.

3) How much disruption will end users experience?

Yes, some users are afraid to move away from MS Outlook and your existing web access for email.  When surveying users, however, we find that in most organizations, 60% to 80% already use cloud-based email services, like Gmail, personally.  The change in user experience is likely less than initial perceptions.

But, moving is a change and can have an impact.

As we move organizations to Google Apps, we include communications about the changes and opportunities for users to learn how to best use the new tools.  We make self-help learning systems — video and interactive — available to users.  We also offer customized workshops and “web office hours”.  In short, many methods exist to help users make the transition and understand how they can do more with their new email service.

4) Is the replacement system you’re considering easy to administer?

If planning to stay in-house, the answer will be “No!”.  New versions of MS Exchange include features and complexity designed to serve the needs of larger enterprises.  For small and mid-size enterprises, they live with the additional administrative burden.

Moving to cloud-based email dramatically reduces administrative requirements.  Without hardware, operating systems, and Exchange software, management of Google Apps for Business focuses on user settings and support.

5) Is the vendor committed to small and mid-sized businesses?

By deeds more than words, Microsoft is focused on large enterprises.  Recent licensing changes have removed the most affordable Windows and Exchange options for small and mid-size enterprises, increasing minimum costs by as much as 100%.

Cumulus Global, as a Google Apps Premier SMB Partner, is focuses exclusively on businesses and nonprofits with 1 to 500 employees.  We also serve K-12 education, smaller higher education, and local/regional governments.  We tailor our services to the needs of small and mid-size enterprises, understanding needs, priorities, and budgets.

6) Is the change a better value?

When moving from any in-house MS Exchange solution to Google Apps for Business, you are gaining more than a secure, reliable email service.  Google Apps is a small business productivity platform, with:

  • Integrated personal and shared calendars
  • Secure Instant Messaging
  • Voice / Video conferencing
  • Hangouts — video meetings with shared documents and desktops
  • Google Docs productivity tools — word processing, spreadsheets, and more
  • Drive for storage of Google-based and legacy files of any type
  • Local Drive sync and share, providing integration for MS Office users
  • Secure web Sites, for your intranet, projects, and customer portals
  • Integration with hundreds of business applications and services.

With more than email to offer, solutions like Google Apps for Business deliver greater value, even if additional features are not used immediately.

Read More →