8/3/2019 ObserveIT Software - Product Information

1/4

ObserveIT User Acvity Session Recording soware meets the complex compliance and security challenges

of user auding.

ObserveIT acts like a security camera on your servers, generang video recording and text audit logs of every

acon the user performs. ObserveIT captures all acvity, even for applicaons that do not produce their own

internal logs. Every acon performed by remote vendors,

developers, sysadmins and business users is ed to a

video recording, providing bulletproof forensic evidence.

ObserveIT is the ideal soluon for 3rd Party Vendor

Monitoring and PCI/HIPAA/SOX/ISO Compliance

Accountability, with a simple and direct soluon

fo PCI Requirements #8, #10 and #12.

people audit

PCI Compliance Highlights

PCI Req. 8 and Req. 10.1 ObserveIT es exactuser names (John) to shared-account access

(Administrator) without the need for complex

password vaults.

PCI Req. 10.2 and Req. 10.3 -ObserveIT gives trueclarity for every user acon. No more wonderingwho or what caused a system change.

PCI 12 ObserveIT ensures that users are informedof corporate policies at the exact me they log in.

Business SoluonsRemote Vendor Monitoring - Know exactly what every remote user is doing on your servers. Improvesecurity and ensure transparent SLA and billing validaon.

Reducing Compliance Costs - Staying compliant is oen just as costly as geng compliant. ObserveITprovides easy gap management, including coverage of PCI Requirements 8, 10, 12, by eliminang the need to

rebuild audit protocols whenever you upgrade business soware processes.

Root Cause Analysis -Achieve fast troubleshoong when you discover the root cause of system config changes.Establish business intelligence with focused navigaon and video playback.

Key FeaturesRecord & Replay User Sessions - Know exactly what users did, with auto-generated video and text logs

for every app

Video Content Analysis - ObserveIT gives full transparency, even when apps have no internal logs built in.For each user session, we tell you which apps, commands, files, URLs or system calls were run within that session,

including for cloud legacy apps that are notoriously difficult to audit.

Privileged User Identficaton - Tie a specific name to everyshared-account user sessions. No more wondering Who ran that

Administrator session?, with a simple approach that

does not require password rotaon or checkin/checkout.

Server + Desktops + VDI Monitoring - Full audit coverage

for all user acvity on servers, desktops or published applicaons.

Bulletproof legal evidence - Reduce the risk of misalignedclient-vendor interests by capturing bulletproof legal evidence

of all vendor acvity. Video replay can be used during ligaon

or to eliminate the need for legal acon.

8/3/2019 ObserveIT Software - Product Information

2/4

ObserveIT: Video replay that showsexactly what the user did

ObserveIT can...Because a picture is worth a thousand logs!

8/3/2019 ObserveIT Software - Product Information

3/4

ObserveIT Eliminates Blindspots:Video and log summaries ofeveryuser acon

Exact video playback

Within each session,details of everyacon taken

For each command, a detailed listof system calls

Exact video playback of TTY

command prompt screen

List of each user command

ObserveIT lists everyuser session

Unix/Linux Session: Video + Analysis

ObserveIT captures shell and console logins,

including all command line acvity plus underlying

system calls. (ex: If user types rm*, ObserveIT

also captures each file name that is deleted.)

Windows Session:Video + AnalysisObserveIT captures window tle,

applicaon name, files opened, URL

accessed, UI element selecon and

text entry

8/3/2019 ObserveIT Software - Product Information

4/4

ObserveIT Feature List

Whos Using ObserveIT

Like a Security Camera on Your Servers.

people audit1 (800) 687-0137 sales@observeit.com www.observeit.com

Generate Logs for Apps that have no logs - Detailed log for all apps, even

those that have no internal logs, including Cloud apps (ex: salesforce.com),

legacy apps (ex: customized ERP) and commercial soware (ex: Excel, SQL

query tools).

Record and Replay Windows, Unix and Linux Sessions - Exact video

playback of every session, including mouse movements, UI interacon, TTY

command line interacon, text entry and underlying system calls. Simple

playback and navigaon of recordings.

Video Content Analysis gives intelligent text logs - Captures details about

each user acon: Applicaon name, User name, Server, Window tle, Fileor Resource accessed, underlying system calls. Interacve drilldown and

fast navigaon eliminates the need to reply hours of video to find what

you need.

Complete Coverage - Agnosc to network protocol and client applicaon.

Captures all remote and console sessions: SSH, Telnet, Terminal Services,

Citrix, Remote Desktop, PC-Anywhere, VMware, VNC, Dameware and more.

Privileged User Identficaton - Add addional level of system access

control for sensive resources. Require shared-id users (ex: administrator)

to add secondary login credenals. Manage users locally or e in to AD.

Real-tme Playback - Session recordings are immediately available

once session begins. View session acvity "on the air", while users are

sll acve.

Canned Audit Reports - Use our pre-built audit reports, or create your

own custom reports. Schedule reports to run automacally for email

delivery, or run ad-hoc and export to Excel or XML.

Robust Security - Agent-Server encrypon, Digital Signatures and

Watchdog mechanism ensure the highest security and reliability.

Small Footprint - Ultra-efficient data storage: Less than 250GB/year for

high-usage, 1000 server environment.

Minimal Agent CPU ulizaon: 0% CPU when no console acve, 1%-2%

CPU, 10 MB RAM during session).

With so many privileged

vendors accessing our servers,

it can be difficult to keep an

eye on who's doing what.

Pelephone

ObserveIT is crical for

answering management's

needs to demonstrate

compliance.

Center to Promote Health Care Access