NETWRIX ALL IN-ONE · PDF fileNETWRIX ALL-IN-ONE SUITE OVERVIEW 1.1. Key Features and Benefits...

NETWRIX ALL-IN-ONE SUITE

FEATURES AND REQUIREMENTS

Copyright © 2013 Netwrix Corporation. All Rights Reserved.

August 2013

Product Version: 4.0

Netwrix All-in-One Suite Features and Requirements

of 15

Copyright © 2013 Netwrix Corporation. All Rights Reserved

Suggestions or comments about this document? www.netwrix.com/feedback

Legal Notice

The information in this publication is furnished for information use only, and does not constitute a

commitment from Netwrix Corporation of any features or functions discussed. Netwrix Corporation

assumes no responsibility or liability for the accuracy of the information presented, which is subject

to change without notice.

Netwrix is a registered trademark of Netwrix Corporation. The Netwrix logo and all other Netwrix

product or service names and slogans are registered trademarks or trademarks of Netwrix

Corporation. Active Directory is a trademark of Microsoft Corporation. All other trademarks and

registered trademarks are property of their respective owners.

Disclaimers

This document may contain information regarding the use and installation of non-Netwrix products.

Please note that this information is provided as a courtesy to assist you. While Netwrix tries to

ensure that this information accurately reflects the information provided by the supplier, please refer

to the materials provided with any non-Netwrix product and contact the supplier for confirmation.

Netwrix Corporation assumes no responsibility or liability for incorrect or incomplete information

provided about non-Netwrix products.

© 2013 Netwrix Corporation.

All rights reserved.


of 15



Table of Contents

1. NETWRIX ALL-IN-ONE SUITE OVERVIEW ....................................................... 4

1.1. Key Features and Benefits .......................................................... 4

1.1.1 .. Change Auditing Solutions .................................................. 4

1.1.2 .. Identity Management Solutions ............................................ 5

1.2. Netwrix All-in-One Suite Modules .................................................. 6

1.3. Netwrix All-in-One Suite Modules Overview ...................................... 6

1.4. Licensing Information ............................................................... 8

2. SYSTEM REQUIREMENTS ....................................................................... 9

2.1. Hardware Requirements ............................................................ 9

2.2. Software Requirements ............................................................. 9

2.3. Supported Microsoft SQL Server Versions ........................................ 10

2.4. Supported Target Environments................................................... 11

A APPENDIX: SUPPORTING DATA ............................................................... 13

A.1 How to Install IIS on Different Windows Versions .............................. 13

A.2 How to Install GPMC on Different Windows Versions .......................... 14

A.3 Related Documentation ............................................................ 15


of 15



1. NETWRIX ALL-IN-ONE SUITE OVERVIEW

1.1. Key Features and Benefits

Netwrix All-in-One Suite 4.0 combines all Netwrix products into one integrated solution aimed

at sustaining security and compliance of your IT infrastructure. The suite contains solutions

for configuration and change auditing and identity management that facilitate and streamline

most administrative tasks of an IT department in any organization.

1.1.1 Configuration and Change Auditing Solution

Netwrix All-in-One Suite includes 4.0 includes Netwrix Auditor 5.0, an integrated solution for

automated auditing of an IT infrastructure. It collects audit data from audited systems and

applications, and translates it into easy-to-understand reports on changes and point-in-time

configuration of the following components of your environment:

Active Directory

Group Policy

Windows-based file servers

EMC VNX/VNXe/Celerra appliances

NetApp Filer

Microsoft Exchange Server

Windows servers

Microsoft SharePoint

Microsoft SQL Server

VMware infrastructure

Unlike the traditional log management solutions (such as, for example Security Information

and Event Management (SIEM) systems), Netwrix Auditor makes it very easy to get relevant

answers to the key questions: who changed what, when and where, including the before and

after values for each change. The product generates daily Change Summaries that are

emailed to the specified recipients and contain a list of all changes that occurred in the last

24 hours. Detailed reports based on SQL Server Reporting Services (SSRS) with various filters

and output formats can be viewed through a web-browser, or in the Netwrix Auditor console.

Netwrix Auditor helps automate and secure the following tasks:

See WHO changed WHAT, WHEN and WHERE: the product detects all changes

throughout an entire IT infrastructure and generates audit reports in a user-

friendly format.

Sustain compliance: all changes made to your IT infrastructure can be archived

and stored for years, enabling you to generate reports for your auditors and

providing a full audit trail. Dozens of report templates streamline compliance to

HIPAA, SOX, PCI, GLBA, FISMA, and may other regulations.

Revert unwanted changes: the product includes the Active Directory Object

Restore tool, which enables attribute-level AD object restore without rebooting a

domain controller and touching the rest of the AD structure, and goes beyond the

standard tombstone capabilities.

Get notified immediately on critical changes: you can configure Real-Time Alerts

to warn you when changes are made to sensitive resources, and, thus, respond to

critical events and protect enterprise-wide integrity from damage.


of 15



Integrate with 3rd-party SIEM systems: Netwrix Auditor can be integrated with

multiple SIEM systems (including SCOM) to let you manage audit data in your usual

way, but with improved performance and increased reliability of collected audit

data.

Consolidate Windows and syslog event logs: the product allows you to collect

Windows event logs and syslog events across the network and store them centrally

in a compressed format.

1.1.2 Identity Management Solutions

Netwrix identity management solutions help organizations solve their most pressing password

management and account management issues. They help automate and secure the following

tasks:

Logon auditing: Automatic consolidation, archiving and reporting on successful

and failed logon events from all Active Directory domain controllers, servers and

workstations.

Restore and reset forgotten passwords: self-service password management

eliminates a great number of help-desk calls and eases implementation of

password policies.

Notify remote users on password expiration: remote (VPN, OWA), as well as

Linux and Mac desktops users, who do not have password change prompts, can be

notified automatically about expiring passwords by email.

Manage account lockouts: account lockout detection, investigation of the root

cause and automated resolution.

De-provisioning of inactive accounts: inactive users accounts can be tracked and

deactivated automatically based on their last logon time.


of 15



1.2. Netwrix All-in-One Suite Target Systems and Solutions

The table below lists the target systems and applications audited by Netwrix Auditor, and the

list of Identity Management module included into Netwrix Netwrix All-in-One Suite 4.0

contains the following modules:

Table 1: Netwrix All-in-One Suite Target Systems and Solutions

Netwrix Auditor Target Systems Identity Management Solutions

Active Directory

Exchange Servers

Group Policy

File Servers (including EMC VNX/VNXe/Celerra and NetApp Filer appliances)

SQL Servers

SharePoint

VMware

Generic Events

Inactive Users Tracking

Password Expiration Alerting

Mailbox Access

+ video auditing for the systems and applications that do not produce logs

Netwrix Account Lockout Examiner 4.1

Netwrix Password Manager 6.5

Netwrix Inactive Users Tracker 3.0

Netwrix Password Expiration Notifier 3.3

1.3. Netwrix All-in-One Overview

Table 2: Configuration and Change Auditing Overview and Table 3: Identity Management

Modules Overview below provide a short description of the Netwrix Auditor functionality for

audit of different target systems and applications:

Table 2: Configuration and Change Auditing Overview

Audited System Description

Active Directory Netwrix Auditor tracks and reports on all changes made to an AD domain, including the Domain, Configuration and Schema partitions. It can also be configured to notify you immediately if critical changes are detected. The product also provides a built-in Active Directory Object Restore tool that allows reverting unwanted changes to AD objects down to the attribute level.

EMC VNX/VNXe/Celerra Netwrix Auditor tracks and reports on all changes made to EMC VNX/VNXe/Celerra storage appliances, including files, folders and permissions, as well as failed and successful access attempts.

Generic Events Netwrix Auditor allows automatic event log consolidation, alerting and archiving. It collects Windows event logs and syslog events from multiple computers across the network, stores them centrally in a compressed format, and enables convenient analysis of event log data and rich reporting capabilities.

Exchange Servers Netwrix Auditor tracks and reports on all changes made to Microsoft Exchange Servers configuration and permissions.

File Servers Netwrix Auditor tracks and reports on all changes made to Windows file servers, including files, folders, shares and permissions, as well as failed and successful access attempts.

Group Policy Netwrix Auditor tracks and reports on all changes made to Group Policy configuration and Group Policy Objects and links.

NetApp Filer Netwrix Auditor tracks and reports on all changes made to NetApp Filer


of 15



Audited System Description CIFS shares.

Mailbox Access Netwrix Auditor tracks all non-owner mailbox access events in an Exchange organization, and immediately notifies users whose mailboxes have been accessed by non-owners.

Windows Servers An auditing solution that tracks and reports on all changes made to your servers configuration, including hardware devices, drivers, software, services, applications, networking settings, registry settings and more.

SharePoint Netwrix Auditor tracks and reports on all changes made to SharePoint farms, servers and sites, as well as their settings and permissions.

SQL Servers Netwrix Auditor tracks and reports on all changes made to your SQL server(s) configuration and database content.

VMware Netwrix Auditor tracks and reports on all changes made to your ESX servers, folders, clusters, resource pools, virtual machines and their hardware.

User Session Activity Netwrix Auditor captures a video of users’ activity on monitored computers and writes a detailed activity log, which helps analyze how changes to your IT infrastructure are made. The product provides detailed user activity reports, moreover, video records can be integrated into change reports on other audited systems.

Table 3: Identity Management Modules Overview

Module Description

Netwrix Account Lockout Examiner

A client-server application that runs as a service and allows efficient handling of account lockout issues. The product performs the following tasks:

Monitors Security event logs on specific domain controllers and detects account lockouts in real-time.

Automatically notifies specified recipients on account lockouts.

Unlocks accounts on the domain controllers where they were locked (for example, when the service account has been updated, or a network drive has been remapped) and allows Active Directory to replicate this change to other domain controllers.

Examines account lockouts for possible lockout reasons and displays examination results in a user-friendly form.

Netwrix Inactive Users Tracker

A tool for automated tracking of inactive user and computer accounts. The product performs the following tasks:

Checks domains or specific organizational units by inquiring all domain controllers, and notifies managers and administrators about accounts that have been inactive for a specified number of days.

Automatically deactivates inactive accounts by settings a random password, disabling, deleting or moving them to a specified organizational unit.

Netwrix Password Expiration Notifier

Checks which domain accounts and/or passwords are to expire in a specified number of days and sends notifications to users via email or text messages (SMS). It also generates summary reports that can be delivered to system administrators and/or users managers. The product also allows checking the effects of a password policy change before applying it to the managed domain.

Netwrix Password Manager A tool for automated password management. The product does the following:

Provides end-users with self-service web access to common password management tasks.

Allows help-desk operators to manage user accounts and view


of 15



Module Description reports on their status through a simple web interface.

Allows administrators to enforce restrictions on what kind of passwords can be used, and to apply security policies and identity verification procedures to the managed domain(s).

For detailed information and instructions on how to install, configure and use the products

forming Netwrix All-in-One Suite, refer to the corresponding documentation (see Appendix

A.3 Related Documentation for links, or download a complete documentation package from

Netwrix All-in-One Suite website page).

1.4. Licensing Information

When you install Netwrix All-in-One Suite 4.0, the Enterprise Editions of all of its modules are

installed.

The Enterprise Editions of all Netwrix products can be evaluated free of charge for 20 days.

For an unlimited use of the modules integrated in Netwrix All-in-One Suite, you must request

the corresponding licenses from Netwrix.

http://dev2.netwrix.com/pdfviewer.html?product=ES&type=QuickStart

http://www.netwrix.com/requestq.html?product=CRsuite


of 15



2. SYSTEM REQUIREMENTS

2.1. Hardware Requirements

Before installing Netwrix All-in-One Suite 4.0, make sure that your system meets the

following hardware requirements:

Table 4: Netwrix All-in-One Suite Hardware Requirements

Minimum Recommended

Processor Intel or AMD 32 bit, 2GHz Intel or AMD 64 bit, 3GHz, 4 Core

Memory 2 GB RAM 8 GB RAM

Disk Space

50 M for each component

NOTE: More space is required for Audit Archive, the local repository of audit data.

2 drives with a total of 50 GB free space

2.2. Software Requirements

Table 5: Netwrix Auditor Software Requirements and Table 6: Identity Management Modules

Software Requirements below list the software requirements for the Netwrix All-in-One Suite

components. The General Requirements section lists the requirements that are common for

all Netwrix change auditing or identity management products included in Netwrix All-in-One

Suite. Other sections list the requirements specific to separate products in addition to the

general requirements. Make sure that this software has been installed on the corresponding

computers before proceeding with the installation.

Table 5: Netwrix Auditor Software Requirements

Audited System Required Software

General Requirements

Windows XP SP3 or above (both 32-bit and 64-bit systems)

.NET Framework 3.5

Windows Installer 3.1 or above

IIS 5.1 or above* (IIS 7.0 requires IIS 6 Management Compatibility – all components)

Note: Only required if you are going to use SQL Server 2005 to store audit data.

Exchange Servers audit

Windows PowerShell 2.0

Note: Only required if your monitored domain has an Exchange organization running Microsoft Exchange Server 2010 or 2013.

Group Policy audit Group Policy Management Console**

* For detailed instructions on how to install IIS, refer to Appendix A.1 How to Install IIS on Different Windows Versions.

** For detailed instructions on how to install Group Policy Management Console

(GPMC), refer to Appendix A.2 How to Install GPMC on Different Windows Versions.

Table 6: Identity Management Modules Software Requirements

Netwrix Product Required Software

General Requirements Windows XP SP3 or above

.NET Framework 3.5 SP1

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=333325fd-ae52-4e35-b531-508d977d32a6

http://www.microsoft.com/en-us/download/details.aspx?id=25

http://support.microsoft.com/kb/968929



of 15



Windows Installer 3.1 or above

Netwrix Account Lockout Examiner Help-Desk Portal:

IIS 6.0 or above*



Microsoft Management Console 3.0 or above

Note: Microsoft Management Console is included in the Windows XP or above operating systems.

Netwrix Password Manager Core Service and Web Application:

IIS 6.0 or above*

Microsoft Internet Explorer 6.0 or later / Mozilla FireFox 2.0 or later / Apple Safari 2.0 or later / Google Chrome 4.0 or later

Password Manager Client:

Microsoft Internet Explorer 6.0 or later

* For detailed instructions on how to install IIS, refer to Appendix A.1 How to

Install IIS on Different Windows Versions.

2.3. Supported Microsoft SQL Server Versions

Microsoft SQL Server provides the Reporting Services that enable creating, viewing and

managing reports based on data stored in a local SQL Server database. Netwrix Auditor uses

these Reporting Services to generate reports on changes to the monitored environment.

To use the Reports functionality, Microsoft SQL Server must be installed on a computer that

can be accessed by Netwrix Auditor.

The following Microsoft SQL Server versions are supported:

Table 7: Supported Microsoft SQL Server Versions

Version Edition

SQL Server 2005 Express Edition with Advanced Services (SP3 or above)

Standard or Enterprise Edition

SQL Server 2008 Express Edition with Advanced Services


SQL Server 2008 R2 (recommended) Express Edition with Advanced Services


SQL Server 2012 Express Edition with Advanced Services


Microsoft SQL Server is not included in the product installation package and must be installed

manually or automatically through the Reports Configuration wizard. This wizard

automatically installs SQL Server Express with Advanced Services and configures the Reporting

Services. SQL server version installed through the wizard depends on the operating system

your computer is running (for details, refer to the following Netwrix Knowledge Base article:

Which SQL Server versions can be installed automatically via Netwrix Management Console).

For your convenience, we have provided instructions on the manual installation of Microsoft

SQL Server with configuration specific for the Reporting Services to function properly. Refer

to the following Netwrix Technical Article for detailed instructions: Installing Microsoft SQL

Server and Configuring the Reporting Services. For full installation and configuration details,

refer to the documentation provided by Microsoft.

Note: If you install the product on a read-only domain controller, SQL Server

installation will fail (both manual or automatic through the Reports Configuration



http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=21844



http://www.microsoft.com/sqlserver/en/us/editions/express.aspx


http://www.netwrix.com/knowledge_base.html?mode=sol&solution=00001530

http://www.netwrix.com/download/documents/Configuring_Microsoft_SQL_Server_Reporting_Services_Technical_Article.pdf

http://www.netwrix.com/download/documents/Configuring_Microsoft_SQL_Server_Reporting_Services_Technical_Article.pdf


of 15



wizard). This is a known issue, for details refer to the following Microsoft

Knowledge Base Article: You may encounter problems when installing SQL Server

on a domain controller. To fix the issue, install the product on a different

computer, or install SQL Server manually on a different computer that can be

accessed by Netwrix Auditor.

2.4. Supported Target Environments

Table 8: Supported Target Systems and Table 9: Identity Management Modules Supported

Target Environments below list the target environments audited by Netwrix products included

in Netwrix All-in-One Suite 4.0:

Table 8: Supported Target Systems

Target System Supported Target Environments

Active Directory

Active Directory (domain and forest functional levels)

Domain controller OS versions:

o Windows Server 2000 SP4


o Windows Server 2003 R2 SP2



EMC VNX/VNXe/Celerra

EMC VNX CIFS shares

EMC VNXe CIFS shares

EMC Celerra CIFS shares

Generic Events

Windows 2000 or above

Red Hat Enterprise Linux 5, Ubuntu 11, Ubuntu Server 11

Any Linux/Unix system using Syslog

Exchange Servers

Microsoft Exchange Server 2003




File Servers Windows 2000 and above file servers

Group Policy

Active Directory (all domain and forest functional levels)







NetApp Filer NetApp Filer CIFS shares

Mailbox Access

Microsoft Exchange 2003



Windows Servers Computers running Windows XP and above

SharePoint

Microsoft SharePoint 2007

NOTE: Support for Microsoft SharePoint 2010 is coming soon!

http://support.microsoft.com/kb/2032911?ppud=4&wa=wsignin1.0

http://support.microsoft.com/kb/2032911?ppud=4&wa=wsignin1.0


of 15



SQL Servers

Microsoft SQL Server 2000



Microsoft SQL Server 2008 R2


VMware

Platforms:

vSphere 4.0 – 5.1

Hosts

ESXi 3.5 – 5.1

ESX 3.0 – 4.1

SW

vCenter Server 4.0 – 5.1

Virtual Center 2.5

Table 9: Identity Management Modules Supported Target Environments

Netwrix Product Supported Target Environments

Netwrix Account Lockout Examiner Active Directory (all domain and forest functional

levels)









Netwrix Password Manager


of 15



A APPENDIX: SUPPORTING DATA

A.1 How to Install IIS on Different Windows Versions

This section provides detailed instructions on how to install Internet Information Services (IIS)

on different Windows versions.

It contains the following procedures:

To install IIS on Windows XP

To install IIS on Windows 2003

To install IIS on Windows 7 / Windows Vista

To install IIS on Windows 2008 / 2008 R2

Procedure 1. To install IIS on Windows XP

1. Navigate to Start Settings Control Panel Add or Remove Programs.

2. Click on Add/Remove Windows Components.

3. Select Internet Information Services (IIS) and click OK to install this component.

Procedure 2. To install IIS on Windows 2003

1. Navigate to Start Settings Control Panel Add or Remove Programs.

2. Click on Add/Remove Windows Components.

3. Double-click Application Server and select Internet Information Services (IIS). Click OK to install this component.

Procedure 3. To install IIS on Windows 7 / Windows Vista

1. Navigate to Start Control Panel Programs and Features.

2. Double-click Turn Windows features on or off.

3. Select Internet Information Services.

4. Enable the following features prior to the installation:

IIS 6 Management Compatibility

ASP extension

Windows Integrated Authentication

Anonymous Authentication

ASP.NET

Procedure 4. To install IIS on Windows 2008 / 2008 R2

1. Navigate to Start Control Panel Programs and Features.

2. Double-click Turn Windows features on or off.

3. Click Add Roles, then Server Roles and select Web Server (IIS).

4. Enable the following features prior to the installation:

IIS 5 Management Compatibility

ASP extension


of 15



Windows Integrated Authentication

Anonymous Authentication

ASP.NET

Note: For detailed instructions on how to install the Web Server role, refer to the

following article: install the Web Server role, refer to the following article:

Installing the Web Server Role.

A.2 How to Install GPMC on Different Windows Versions

This section provides detailed instructions on how to install Group Policy Management Console

(GPMC) on different Windows versions.

It contains the following procedures:

To install GPMC on Windows XP / 2003

To install GPMC on Windows 7 / Windows Vista

To install GPMC on Windows 2008 / 2008 R2

Procedure 5. To install GPMC on Windows XP / 2003

Download and install Group Policy Management Console.

Procedure 6. To install GPMC on Windows 7 / Windows Vista

1. Download and install Remote Server Administration Tools that includes Group Policy Management Console.

2. Navigate to Start Control Panel Programs and Features Turn Windows features on or off.

3. Navigate to the Remote Server Administration Tools node and select Group Policy Management Tools.

4. Click Install to install this feature.

Procedure 7. To install GPMC on Windows 2008 / 2008 R2

1. Navigate to Start Control Panel Programs and Features Turn Windows features on or off.

2. In the Server Manager dialog, select Features in the left pane, click Add Features and select the Group Policy Management feature.

3. Click Install to enable this feature.

http://learn.iis.net/page.aspx/192/installing-the-web-server-role/




of 15



A.3 Related Documentation

This section provides links to documentation published to support All-in-One Suite 4.0. You

can also download a complete documentation package from Netwrix All-in-One Suite website

page.

Table 10: Netwrix All-in-One Suite Modules Documentation Links

Module Name Documentation Link

Netwrix Auditor

Active Directory Product Documentation

Exchange Servers Product Documentation

Generic Events Product Documentation

EMC VNX/VNXe/Celerra Product Documentation

File Servers Product Documentation

Group Policy Product Documentation

NetApp Filer Product Documentation

Mailbox Access Product Documentation

Windows Servers Product Documentation

SharePoint Product Documentation

SQL Servers Product Documentation

VMware Product Documentation

User Session Activity Product Documentation

Identity Management Modules

Netwrix Account Lockout Examiner Product Documentation

Netwrix Inactive Users Tracker Product Documentation

Netwrix Password Expiration Notifier Product Documentation

Netwrix Password Manager Product Documentation



http://www.netwrix.com/pdfviewer.html?product=adcr&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=ecr&type=QuickStart

http://dev2.netwrix.com/pdfviewer.html?product=elm&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=emccr&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=fscr&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=gpcr&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=nfcr&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=nomba&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=scm&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=spcr&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=sqlcr&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=crvm&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=uavr&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=ale&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=iut&type=QuickStart

http://www.netwrix.com/pdfviewer.html?product=pen&type=QuickStart

http://www.netwrix.com/password_manager.html

NETWRIX ALL IN-ONE · PDF fileNETWRIX ALL-IN-ONE SUITE OVERVIEW 1.1. Key Features and Benefits...

Documents

Transcript of NETWRIX ALL IN-ONE · PDF fileNETWRIX ALL-IN-ONE SUITE OVERVIEW 1.1. Key Features and Benefits...