File system auditing who accessed what files and where

19
Affordable Simple, Efficient, Affordable #1 for Change Auditing File System Auditing: Who Accessed What Files and Where? Bob Bobel, Director of Product Management E-mail: [email protected] Twitter: @rbobel LinkedIn: www.linkedin.com/in/robertbobel

Transcript of File system auditing who accessed what files and where

Page 1: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Simple, Efficient, Affordable

#1 for Change Auditing

File System Auditing: Who Accessed What Files and Where?

Bob Bobel, Director of Product ManagementE-mail: [email protected]: @rbobelLinkedIn: www.linkedin.com/in/robertbobel

Page 2: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

About NetWrix Corporation

• Founded in 2006 HQ located in New Jersey • Philosophy - Simple, Efficient and Affordable• Global customer base of approximately 6000• As of 2011 approximately 6M licenses sold• Focused on Auditing with an R&D to staff ratio 3:1• Offices in North America, UK and APACJ• Microsoft Gold Certified Partner

Page 3: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Agenda

• Challenges of File System Auditing• Benefits of File System Auditing• Solution Requirements• Introducing NetWrix File Server Change

Reporter• Demonstration• Why NetWrix?• Questions

Page 4: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Challenges of File System Auditing

• Event data can be complex and time consuming to collect and manage

• Native audit logs lack key information and is often confusing

• Native tools don’t provide point-in-time or configuration reporting

• Large volumes of data• Permissions not assigned centrally• Data ownership is in question

Page 5: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Benefits of File System Auditing

• Efficiently meet Access Governance, Legal or regulatory Compliance

• Improve Security• Increase oversight of user activity

Quickly can you answer: Who accessed What files, When and Where?

Page 6: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Solution Requirements

• Centralized Auditing of File & folder Access• Simply and efficiently display key WHO, WHAT,

WHEN and WHERE changes details with both BEFORE and AFTER values

• Efficient sort term and long term storage of data• Support for popular storage devices

(EMC/NetApp)

Page 7: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Solution Requirements (continued)

• Predefined reports (Not offered natively)• Compliance-ready reports• Report customization• Report subscriptions• Human-readable output

Page 8: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Introducing…NetWrix File Server Change ReporterUnified Auditing for Files and Folders

• Simple – Easy to use, installs in minutes & built on NetWrix Change Reporter platform

• Efficient - lightweight architecture without dangerous agents or OS level drivers

• Affordable - modular and part of the NetWrix Change Reporter Suite

Page 9: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Features & Benefits

• Real-time alerts• File Restore• DFS support• NetApp Filer• EMC Celerra/VNX• Other CIFS-compliant hardware• Included in the NetWrix Change Reporter

Suite

Page 10: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Features and Benefits

Audit data we collect AuditAssurance™• Configuration• Native Events• Other

Scalable Storage• The Backbone of reporting• Normalized the 4W details of Who, What, When and Where

across systems and applications AuditIntellegence™• Searchable and supports custom reports

Page 11: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Features and Benefits

Analysis & Reporting• Pre-built reports many designed from customer

feedback• View on-screen, over the Web, Export in various

formats & subscriptions for automation• Clearly displays 4W detail Who, What, When

and Where• Uses Microsoft SQL Reporting Services

Page 12: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Features and Benefits

AuditArchive™• Configurable Retention Policy

– Store years of data, competitors may only store months of data

• Can be accessed when needed for historical purposes (import)

Page 13: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

NetWrix AAA Technology Platform

AuditAssurance™ technology consolidates audit data from multiple independent sources, filling-in key details not present in any single source.

AuditIntelligence™ technology provides a complete audit picture by transforming raw audit data into meaningful and actionable intelligence.

AuditArchive™ technology provides long-term archiving, making your data available for historical reporting and forensics analysis.

Page 14: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Simple, Efficient, Affordable

#1 for Change Auditing

Demonstration

Page 15: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

• ING Direct• Forex Capital Markets• Berkshire Hathaway• Zurich Financial Services• Thomson Reuters• Fiserv

• Columbia University• Bureau of National Affairs • State of Maine• NYC Dept. of Transportation• US District Court, SDNY• Massachusetts Port Authority• Alaska State Legislature• Columbia University• Verizon Business Systems• Black & Decker• Universal NBC• US Military Academy

Federal, State & Local GovernmentFinancial

• Vertex Pharmaceuticals• Blue Cross of Idaho• Berkeley National Laboratory• National Institute of Health (NIH)• Massachusetts General Hospital• WebMD

Healthcare & Pharmaceutical

Others who chose NetWrix

Page 16: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

NetWrix Suites

All-in-One SuiteChange Reporter Suite

SharePointSQL ServerWindows ServerVMwareEvent Log ManagerActivity Recorder

Active DirectoryObject RestoreGroup PolicyExchangeMailbox AccessFile ServersNetApp & EMC

IDM Suite

Password ManagerPassword Expiration Notifier Logon ReporterInactive Users Tracker

FREE Trials at www.netwrix.com

Page 17: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Protect your investment

• Upgrade to any suite = 100% credit applied from any prior license purchase

• New product additions to suites are provided to you at no charge so long as support and maintenance fees are current

Page 18: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Next Steps…

• Download a FREE TRIAL at www.netwrix.com– Trial license is included with the download– Support is provided during trial period

• Virtual POC– Virtual TestDrive™ is available in some areas– Online server allows you to quickly understand the

incredible value of our software

Page 19: File system auditing who accessed what files and where

Simple, Efficient, Affordable

#1 for Change Auditing

Simple, Efficient, Affordable

#1 for Change Auditing

Thank you

For more information visit www.netwrix.com

Bob Bobel, Director of Product ManagementE-mail: [email protected]: @rbobelLinkedIn: www.linkedin.com/in/robertbobel