File system auditing who accessed what files and where
1. #1 for Change Auditing
Simple, Efficient, Affordable
File System Auditing: Who Accessed
What Files and Where?
Bob Bobel, Director of Product Management
E-mail: bob.bobel@netwrix.com
Twitter: @rbobel
LinkedIn: www.linkedin.com/in/robertbobel
#1 for Change Auditing
Simple, Efficient, Affordable
2. About NetWrix Corporation
• Founded in 2006 HQ located in New Jersey
• Philosophy - Simple, Efficient and Affordable
• Global customer base of approximately 6000
• As of 2011 approximately 6M licenses sold
• Focused on Auditing with an R&D to staff ratio 3:1
• Offices in North America, UK and APACJ
• Microsoft Gold Certified Partner
#1 for Change Auditing
Simple, Efficient, Affordable
3. Agenda
• Challenges of File System Auditing
• Benefits of File System Auditing
• Solution Requirements
• Introducing NetWrix File Server Change
Reporter
• Demonstration
• Why NetWrix?
• Questions
#1 for Change Auditing
Simple, Efficient, Affordable
4. Challenges of File System Auditing
• Event data can be complex and time consuming to
collect and manage
• Native audit logs lack key information and is often
confusing
• Native tools don’t provide point-in-time or
configuration reporting
• Large volumes of data
• Permissions not assigned centrally
• Data ownership is in question
#1 for Change Auditing
Simple, Efficient, Affordable
5. Benefits of File System Auditing
• Efficiently meet Access Governance, Legal or
regulatory Compliance
• Improve Security
• Increase oversight of user activity
Quickly can you answer: Who accessed What
files, When and Where?
#1 for Change Auditing
Simple, Efficient, Affordable
6. Solution Requirements
• Centralized Auditing of File & folder Access
• Simply and efficiently display key
WHO, WHAT, WHEN and WHERE changes
details with both BEFORE and AFTER values
• Efficient sort term and long term storage of data
• Support for popular storage devices
(EMC/NetApp)
#1 for Change Auditing
Simple, Efficient, Affordable
8. Introducing…
NetWrix File Server Change Reporter
Unified Auditing for Files and Folders
• Simple – Easy to use, installs in minutes &
built on NetWrix Change Reporter platform
• Efficient - lightweight architecture without
dangerous agents or OS level drivers
• Affordable - modular and part of the NetWrix
Change Reporter Suite
#1 for Change Auditing
Simple, Efficient, Affordable
9. Features & Benefits
• Real-time alerts
• File Restore
• DFS support
• NetApp Filer
• EMC Celerra/VNX
• Other CIFS-compliant hardware
• Included in the NetWrix Change Reporter
Suite
#1 for Change Auditing
Simple, Efficient, Affordable
10. Features and Benefits
Audit data we collect AuditAssurance™
• Configuration
• Native Events
• Other
Scalable Storage
• The Backbone of reporting
• Normalized the 4W details of Who, What, When and
Where across systems and applications
AuditIntellegence™
• Searchable and supports custom reports
#1 for Change Auditing
Simple, Efficient, Affordable
11. Features and Benefits
Analysis & Reporting
• Pre-built reports many designed from customer
feedback
• View on-screen, over the Web, Export in various
formats & subscriptions for automation
• Clearly displays 4W detail Who, What, When
and Where
• Uses Microsoft SQL Reporting Services
#1 for Change Auditing
Simple, Efficient, Affordable
12. Features and Benefits
AuditArchive™
• Configurable Retention Policy
– Store years of data, competitors may only store
months of data
• Can be accessed when needed for historical
purposes (import)
#1 for Change Auditing
Simple, Efficient, Affordable
13. NetWrix AAA Technology Platform
AuditAssurance™ technology consolidates audit
data from multiple independent sources, filling-
in key details not present in any single source.
AuditIntelligence™ technology provides a
complete audit picture by transforming raw audit
data into meaningful and actionable intelligence.
AuditArchive™ technology provides long-term
archiving, making your data available for
historical reporting and forensics analysis.
#1 for Change Auditing
Simple, Efficient, Affordable
14. #1 for Change Auditing
Simple, Efficient, Affordable
Demonstration
#1 for Change Auditing
Simple, Efficient, Affordable
15. Others who chose NetWrix
Financial Federal, State & Local Government
• ING Direct • Columbia University
• Forex Capital Markets • Bureau of National Affairs
• Berkshire Hathaway • State of Maine
• Zurich Financial Services • NYC Dept. of Transportation
• Thomson Reuters • US District Court, SDNY
• Fiserv • Massachusetts Port Authority
• Alaska State Legislature
Healthcare & Pharmaceutical • Columbia University
• Vertex Pharmaceuticals • Verizon Business Systems
• Blue Cross of Idaho • Black & Decker
• Berkeley National Laboratory • Universal NBC
• National Institute of Health (NIH) • US Military Academy
• Massachusetts General Hospital
• WebMD
#1 for Change Auditing
Simple, Efficient, Affordable
16. NetWrix Suites
All-in-One Suite
Change Reporter Suite IDM Suite
Active Directory SharePoint Password Manager
Object Restore SQL Server Password Expiration
Group Policy Windows Server Notifier
Exchange VMware Logon Reporter
Mailbox Access Event Log Manager Inactive Users Tracker
File Servers Activity Recorder
NetApp & EMC FREE Trials at
www.netwrix.com
#1 for Change Auditing
Simple, Efficient, Affordable
17. Protect your investment
• Upgrade to any suite = 100% credit applied
from any prior license purchase
• New product additions to suites are provided
to you at no charge so long as support and
maintenance fees are current
#1 for Change Auditing
Simple, Efficient, Affordable
18. Next Steps…
• Download a FREE TRIAL at www.netwrix.com
– Trial license is included with the download
– Support is provided during trial period
• Virtual POC
– Virtual TestDrive™ is available in some areas
– Online server allows you to quickly understand the
incredible value of our software
#1 for Change Auditing
Simple, Efficient, Affordable
19. #1 for Change Auditing
Simple, Efficient, Affordable
Thank you
For more information visit www.netwrix.com
Bob Bobel, Director of Product Management
E-mail: bob.bobel@netwrix.com
Twitter: @rbobel
LinkedIn: www.linkedin.com/in/robertbobel
#1 for Change Auditing
Simple, Efficient, Affordable
Editor's Notes
AuditAssurance™ technology consolidates the audit data from multiple independent sources (event logs, configuration snapshots, change history records, etc.), and therefore is able to detect a change even if one or more of the sources does not contain all the required data. AuditIntelligence™ technology transforms raw audit data into meaningful and actionable intelligence to drive security and compliance efforts and delivers human-readable reports designed with administrators and auditors in mind to paint the most complete picture.