LT Auditor+ for NSS File Systems
Blue Lance2.0’s LT Auditor+ for NSS File Systems is designed to provide detailed auditing and monitoring system activity delivering Clear, Concise, Actionable intelligence. LT Auditor+ for NSS File Systems interacts seamlessly and unobtrusively with the operating system to capture all essential activity and changes on OpenText’s NSS File Systems
Features and Benefits
- Quality Data: Removes the complexity from cryptic vigil logs by providing clear, concise information on who did what from where and when on your NSS file systems in human readable format.
- Real-Time Alerts: Get notified in real time when critical or sensitive files are accessed by unauthorized nodes or users.
- Audit Data Reduction: Allows for complex filtering from hundreds and thousands of events per second so as to collect relevant data for auditing. This avoids the clutter and noise associated with enormous volumes of event log data, providing for high quality reporting and forensic analysis.
- Simplified Management:Provides the ability to audit and monitor multiple NSS volumes across servers or clusters from a single console.
- Trustee Changes: Monitor when permissions and trustees to sensitive files are changed. This is important to secure the principals of ‘Least Privileges’ and ‘Need to Know’.
- File Access: Captures the source IP address/workstation name for all access to critical files and folders on NSS file systems. This ensures accountability as you know who exactly is accessing critical or sensitive information and also acts as deterrent to prevent insider threats.
- Multi-Forest Support for Active Directory Users: Provides the ability to audit Active Directory users accessing OES2105 NSS volumes using CIFS (Common Internet File System protocol).
Audited Events
File open
File Close
Create File
Delete File
Rename File
Modified File
Create Link
File Close
Create File
Delete File
Rename File
Modified File
Create Link
Create Directory
Remove Directory
Rename Directory
Remove Directory
Rename Directory
Add Trustee
Remove Trustee
Set Inherited Rights
Remove Trustee
Set Inherited Rights
Reports Template
Files Access Report
Files Created Report
Files Deleted Report
Files Modified/Written To Report
Files Renamed Report
Files Modified/Written To Report
Files Created Report
Files Deleted Report
Files Modified/Written To Report
Files Renamed Report
Files Modified/Written To Report
Folders Created Report
Folders Deleted Report
Folders Accessed Report
Folders Renamed Report
Folders Deleted Report
Folders Accessed Report
Folders Renamed Report
Added Trustee Report
Removed Trustee Report
Set Inherited Rights Report
Removed Trustee Report
Set Inherited Rights Report