Directory Server Auditing and Reporting

Directory system auditing and reporting solutions have the ability assess the users and groups within the network directory. The network directory’s users and groups are often used for user authentication and authorisation to networking resources. Having an auditing and reporting capability for this information will allow organizations to understand and audit their security controls more readily.

NetVision

NetVision’sNVAssess enables automated reporting of user accounts and group memberships in the network directory. These accounts and groups enable access to sensitive information across the network. Understanding accounts, account status, attributes, and group memberships is a key aspect of answering audit questions about access rights.

NVAssess enables you to report on any combination of object and attribute in the directory as well as to gather a robust set of file system information. This includes answers to common questions such as:

    • What Accounts Exist?
    • Which Accounts are Enabled or Disabled?
    • Which Accounts are Dormant or Unused?
    • Which Accounts have Specific Attributes (job titles, departments, etc.)?
    • What Groups Exist?
    • Which Accounts are Members of Which Groups?
    • What Permissions Exist on a File or Folder?

NetVision’sNVMonitor enables real time monitoring directory activity. Based on policies, which can filter by affected object or who is making the change, NVMonitor can send alerts, remediate changes, disable attacker accounts, create helpdesk tickets, and more. NVMonitor event information is collected directly from the source for immutable, non- repudiable, and complete reports. Events are filtered and analysed in real time to ensure extremely high relevance in reports and alerts.

When used to monitor a network directory, NVMonitor can track activities such as:

    • Account Creations
    • Account Deletions
    • Account Status Changes
    • Account Attribute Changes
    • Group Membership Changes
    • User Authentications
    • Mail Message Create/Modify/Delete
    • Mail Contact Create/Modify/Delete
    • Calendar Appointment Create/Modify/Delete