v137 · miscellaneous

IP Address Logging & Reporting

Chrome Enterprise is enhancing security monitoring and incident response capabilities by collecting and reporting local and remote IP addresses & sending those IP addresses to the Security Investigation Logs (SIT). In addition, Chrome Enterprise will allow admins to optionally send the IP addresses to 1P & 3P SIEM providers via the Chrome Enterprise Reportin

concepts

  1. IP Logging

    Reporting API gains opt-in IP logging. Lets sites tie browser-side report streams to their server-side request logs for incident debugging.

  2. Incident Timeline

    The SIEM correlation use case Chrome Enterprise pitched: simulated browser events + firewall logs, with the connector's include_remote_ip flag toggled on/off, showing what an analyst can and can't reconstruct.

  3. Policy Planner

  4. Report Format Explorer

    Configure IP masking level, endpoint URL, and failure fraction, then generate the exact NEL header, Report-To header, and the full Reporting API JSON body for a simulated network error event — including the masked/omitted ip_address field.

    Compose Reporting-Endpoints + IP policy, pick a trigger condition, and preview the exact headers, the JSON shape Chrome would POST, and the privacy classification of every field. Region floor selector flags GDPR / CCPA exposure.

why it shipped

Chrome Enterprise is enhancing security monitoring and incident response capabilities by collecting and reporting local and remote IP addresses & sending those IP addresses to the Security Investigation Logs (SIT). In addition, Chrome Enterprise will allow admins to optionally send the IP addresses to 1P & 3P SIEM providers via the Chrome Enterprise Reportin

references