Unsolved
This post is more than 5 years old
1 Rookie
•
13 Posts
0
3126
July 29th, 2016 16:00
Audit and Reporting Tool? FLR?
Hello!
I am looking for a solution native to the VNX that is akin to Dell Change Auditor. Net/Net, I do not believe FLR and VNX EE have the same functions. We have x2 VNX7500 w/ Datamovers that need detailed ongoing logging and auditing of file access. Here are the primary features we are looking for:
- At-a-glance display - Tracks user and administrator activity with detailed information including who, what, when, where, which workstation and why for change events, plus original and current values for all changes.
- Real-time alerts on the move - Sends critical change and pattern alerts to email and mobile devices to prompt immediate action, enabling you to respond faster to threats even while you're not on site.
- High-performance auditing engine - Removes auditing limitations and captures change information without the need for native audit logs, resulting in faster results and significant savings of storage resources.
- Centralized auditing - Provides the ability to manage, monitor and audit all file server changes from a single location, which streamlines management of multiple servers and locations to a single, easy-to-use console.
- Auditor-ready reporting - Generates comprehensive reports for best practices and regulatory compliance mandates for SOX, PCI-DSS, HIPAA, FISMA, GLBA and more.
- Role-based access - Configures access so auditors can run searches and reports without making any configuration changes to the application, and without requiring the assistance and time of the administrator.
- Event timeline - Enables the viewing, highlighting and filtering of change events and the relation of other events over the course of time in chronological order across your Windows environment for better understanding and forensic analysis of those events and trends.
- Related searches - Provides instant, one-click access to all information on the change you're viewing and all related events, such as what other changes came from specific users and workstations, eliminating additional guesswork and unknown security concerns.
- Web-based access with dashboard reporting - Searches from anywhere using a web browser and creates targeted dashboard reports to provide upper management and auditors with access to the information they need without having to understand architecture or administration.
Thanks so much for any guidance...
dynamox
9 Legend
•
20.4K Posts
0
July 29th, 2016 20:00
you are not getting all that even with 3rd party tools like Varonis.
k28daniel
1 Rookie
•
13 Posts
0
July 30th, 2016 02:00
You guys need to step up your game....
Dan Morris
916.949.3442
dmorris@kovarus.com
www.kovarus.com
Sent from my Sprint Samsung Galaxy S7.
Rainer_EMC
4 Operator
•
8.6K Posts
0
August 1st, 2016 07:00
Did you evaluate Varonis ?
umichklewis
3 Apprentice
•
1.2K Posts
0
August 1st, 2016 08:00
Maybe if dynamox was an EMC software designer...
You do realize you could just, use Dell Change Auditor with VNX, right? Or NetApp or a couple of other NAS platforms. EMC, NetApp and other NAS tend to leave out much of this functionality, just so that Varonis, Dell, Northern Storage and other vendors can build (and sell) them in their products.
For what it's worth, Varonis provides much of (not all) of what you list, and will do so across many NAS platforms. While they lack good timeline integration, the get top marks (in our book) for meeting much of the rest of your list. DCA actually meets fewer of your list bullets than Varonis with NAS platforms, but Dell's enterprise licensing seems much more affordable for larger clients (Varonis can become unwieldy if you have lots of NAS platforms but little storage).
The available auditing in VNX certainly seems limited on the surface, but there's little value add, I think, for most customers. Why? Most IT organizations are looking for centralizing reporting and auditing functions. I'd wager they'd rather get 60% of the bullets you list from one tool, enterprise-wide, than run even two or three tools to get 90% of the data from just one platform.
k28daniel
1 Rookie
•
13 Posts
0
August 1st, 2016 12:00
Actually the Dell Audit tool seems to be the most robust followed by NetWRix.
dynamox
9 Legend
•
20.4K Posts
0
August 1st, 2016 20:00
I am working on my python scripting skills, does it count ?
We use Varonis to audit Isilon, i don't see anything real-time in this product, unless you manually kick off the job, your auditing reports are available 24 hours later. Otherwise pretty versatile product.
umichklewis
3 Apprentice
•
1.2K Posts
0
August 2nd, 2016 06:00
Exactly this. We have scheduled tasks that kick off at Oh-Dark-Early, just to get reports that are only a few hours old. At our last sales call, they talked about adding more real-time dashboards in future releases, but they didn't give a timeline on adding that feature.
Jeff-Netwrix
1 Message
0
August 3rd, 2016 07:00
Netwrix Auditor for EMC can do that, except for real-time alerts part (though it's to be implemented soon) and web-based access. All other points are covered
kelleg
4 Operator
•
4.5K Posts
0
December 6th, 2018 07:00
You do realize that this is a two year old thread? You might want to try google to see if it's still available.
glen