Google Gmail

Overview

Google offers a lot of APIs for Gmail and Google Drive. Email Security initiates the security by fetching all emails, attachments, files, and folders metadata in a bootstrap process. The bootstrap ensures the customer's dedicated virtual appliance has the same cloud state.

How it Works

Gmail offers file sharing and file collaboration tools that allow employees and outside collaborators to share files. Email Security adds additional layers of security, privacy, and compliance not offered by Google.

• Malware detection with Anti-Virus and Advanced Persistent Threat detection

• Data Leakage Prevention

• Revocable Encryption (for files leaving the environment)

• File sanitization

Required Permissions

The cloud state used for Gmail by Email Security is composed of the following entities:

• Users

• Emails

• Attachments

• Labels used in emails

Once the cloud state is saved, Email Security starts monitoring the changes for each user. To track each change for each user in the cloud, Email Security uses the following channels:

• Subscribe each user to Google Push Notifications for new messages (https://developers.google.com/gmail/api/guides/push)

• Fallback to polling each user history of changes, each minute if Push Notifications fails (https://developers.google.com/gmail/api/guides/sync)

Email Security uses the following resources for Gmail from the APIs:

• Messages

• Labels

• History of changes

• Attachments

Email Security requires the following permissions from Gmail.