NetVision
NetVision offers access rights reporting solutions that enable organizations to easily and automatically obtain the most relevant and actionable information needed to protect their assets, mitigate risk, and reduce the cost and complexity of compliance and audit. NetVision’s patented technology platform combines advanced event filtering with real-time monitoring, from-the-source data collection and a powerful and flexible reporting engine to deliver immediate answers to critical identity and access rights questions.
NetVision Products
NVMonitor
NVMonitor enables real time monitoring of access rights, administrative activity, and user behaviour. Based on policies, which can filter by affected object or who is making the change, NVMonitor can send alerts, remediate changes, disable attacker accounts, create helpdesk tickets, and more.
NVMonitor event information is collected directly from the source for immutable, non- repudiable, and complete reports. Events are filtered and analysed in real time to ensure extremely high relevance in reports and alerts.
Some of the activities that NetVision NVMonitor Monitors include:
- Account Creations
- Account Deletions
- Account Status Changes
- Account Attribute Changes
- Group Membership Changes
- File or Folder Permission Changes
- File or Folder Reads, Writes, or Deletes
- User Authentications
- User File or Folder Activity
- Mail Message Create/Modify/Delete
- Mail Contact Create/Modify/Delete
- Calendar Appointment Create/Modify/Delete
NVAssess
NVAssess enables automated reporting of user accounts and group memberships in the network directory. These accounts and groups enable access to sensitive information across the network. Understanding accounts, account status, attributes, and group memberships is a key aspect of answering audit questions about access rights.
NVAssess enables you to report on any combination of object and attribute in the directory as well as to gather a robust set of file system information. This includes answers to common questions such as:
- What Accounts Exist?
- Which Accounts are Enabled or Disabled?
- Which Accounts are Dormant or Unused?
- Which Accounts have Specific Attributes (job titles, departments, etc.)?
- What Groups Exist?
- Which Accounts are Members of Which Groups?
- What Permissions Exist on a File or Folder?
- What Trustee Rights Exist in NetWare?
- Where do Certain File Types Exist on the Network?
NVAssess Features
- Flexible Querying: NetVision NVAssess policy queries are open and flexible. NVAssess sees all schema extensions and can apply constraints on queries to generate a highly relevant result set.
- Schedule: Policies and reports can be scheduled so keep data fresh and up-to-date.
- Export/Email: Reports can be exported and emailed to business managers or auditors on a scheduled basis.
- Integrated: NVAssess works across multiple platforms and is fully integrated with NetVision NVMonitor and Access Rights Inspector to provide complete access rights coverage in a single, easy-to-use reporting console
Access Rights Inspector
Access Rights Inspector calculates permissions across file system and directory objects to provide effective rights reports. This essentially answers the question Who has access to what?
Directory and File System rights are complicated to capture. Actual permissions are often granted or denied based on a combination of explicitly assigned rights, group memberships, inherited rights, network share permissions, object ownership, denied permissions, and more.
NetVision’s Access Rights Inspector provides detailed answers on access rights across Active Directory and Windows file system environments. Reports can then be scheduled and emailed to business managers and auditors.
Access Rights Inspector provides complete answers on user access rights for both the Windows File System and Active Directory. It provides reports on where rights have been explicitly assigned and also analyzes all rights assignments to give you the calculated result of all contributing access rights, including nested groups, inherited rights, object ownership, and share permissions.
Report Types
- Effective Rights: Reports on calculated rights accounting for group memberships, inheritance, direct assignments, and other factors.
- Explicit Rights: Reports on explicit permission assignments.
- Direct User Assignments: Reports on instances where a user account has been granted access directly to a resource.
- Deny Entries: Reports on instances of explicitly denied permissions.
- Group Memberships: Reports on group membership assignments.
Features
- Saved Reports: Users can save reports for future use based on the selected set of users/groups, resources, and permissions.
- Report Creation Wizard: New reports can be generated with the help of a wizard that walks users through a series of steps to define report parameters.
- Report Format Options: Report results can be displayed in traditional Table format where columns represent sortable fields of information or Tree View format which displays a collapsible tree that can be manually explored.
- Report Point-of-View Options: Reports can be created based on either a User-Centric View (which displays permissions per user) or a Resource-Centric View (which displays permissions per resource).
- Scheduled Exports: Reports can be exported in multiple formats and scheduled for export and/or email. Email business managers with who has what rights to their sensitive content.
- Flexible and Powerful: Report Types and flexible filtering criteria enable a single, highly flexible and powerful solution that allow easy reporting that meets the specific individual needs of any organization.
Related Solutions
File System auditing and reporting
