NetIQ Change Guardian for Windows
- Click to Enlarge
NetIQ Change Guardian for Windows gives you invaluable insight into the activities of, and changes implemented by, privileged-level users across your Windows systems, providing the visibility you need to protect your Windows environment, hosted data and applications from dangerous security exposures.
Monitoring for changes is often regarded a best practice in IT, and is mandated by regulations such as the Payment Card Industry Data Security Standard (PCI-DSS). By understanding what activities and changes are taking place across your Windows systems, you can dramatically reduce risks to the availability of your systems and IT services, and the confidentiality of your data.
NetIQ Change Guardian for Windows provides an innovative approach that delivers powerful, real-time change monitoring across files, directories, shares, registry entries and system processes, rapidly identifying and alerting on potentially dangerous changes across your environment.
Ready to Try it?
Recent publicized security incidents have shown the compromise of sensitive data due to some unplanned or unauthorized change. Unfortunately, popular monitoring products often use an approach that does not scale well to the demands of the organization, such as:
- Native auditing, which often degrades server performance too much, and creates confusing and bloated audit trails.
- File integrity checks that can cause unacceptable spikes in system utilization and may rely upon native auditing.
- Kernel shimming, which can introduce problems with system reliability and are difficult to deploy on a large scale.
NetIQ Change Guardian for Windows overcomes these challenges through a unique, Microsoft-approved approach to auditing changes and privileged user activities. The solution delivers a high fidelity of change and activity information with minimal impact on server resources, capturing and reporting before and after values for objects, and reducing the often noisy volume of events into fewer, more meaningful events.
View NetIQ Change Guardian for Windows' Features
Key Benefits
- Eliminates the need for native Windows object-level auditing, drastically reducing server utilization: Uses a Microsoft-approved monitoring mechanism to avoid the performance degradation that native auditing can present, while providing a high fidelity of change information.
- Validates and enforces change control processes: Identifies "managed" changes made using an authorized change control interface or via a prescribed manner, versus unmanaged changes that may indicate circumvention of change controls.
- Centrally records and audits changes: Compiles critical change information from across the organization for subsequent analysis, helping eliminate the complexities of aggregating change events for regulatory compliance and incident investigation.
- Delivers comprehensive change reporting: Captures before and after values for objects, enabling detailed change reports based on one or more users or computers, helping to quickly identify anomalies and enabling investigators to quickly drill down into more detailed information.
- Works with a broader solution for Windows change control: Extends the functionality of NetIQ Security Manager and augments NetIQ Change Administrator to provide a comprehensive solution for privilege delegation, privileged user monitoring, and server security.
