10 common netwrix auditor configuration mistakes...between 500 and 1,000 users netwrix auditor...

27
10 Common Netwrix Auditor Configuration Mistakes

Upload: others

Post on 16-Aug-2020

16 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

10 Common Netwrix Auditor Configuration Mistakes

Page 2: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Welcome

Email: [email protected]

Mason TakacsSystems Engineer

Page 3: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Agenda

Typical Mistakes

Product Misconfiguration Consequences

Best Practices to Fine-tune Netwrix Auditor

Q&A Session

Prize Drawing

Page 4: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Netwrix Auditor Configuration Mistakes

Installing Netwrix Auditor not to

a dedicated server

Page 5: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Netwrix Auditor Configuration Mistakes

Not meeting system requirements

Page 6: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Sizing recommendations

General guidelines for installations

Less than 500 users

Between 500 and 1,000 users

Between 1,000 and 20,000 users

More than 20,000 users

Page 7: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Less than 500 users

Netwrix Auditor and SQL Server EXPRESS

Processor – 2 Cores

RAM – 4 GB RAM

Disk Space

• 100 GB on system drive

• 100 GB on data drive (required for SQL Server and Long-Term Archive)

Page 8: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Between 500 and 1,000 users

Netwrix Auditor

Processor - 2 Cores

RAM – 8 GB RAM

Disk Space

• 100 GB on system drive

• 100-200 GB on data drive

(required for Long-Term Archive)

SQL Server EXPRESS

Processor – 2 Cores

RAM – 8 GB RAM

Disk Space

• 100 GB on system drive

• 100-200 GB on data drive

(required for SQL Server)

Page 9: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Between 1,000 and 20,000 users

Netwrix Auditor

Processor – 2-4 Cores

RAM – 8-16 GB RAM

Disk Space

• 200 GB on system drive

• 200-400 GB on data drive

(required for Long-Term Archive)

SQL Server Standard/Enterprise

Processor – 2-4 Cores

RAM – 16-32 GB RAM

Disk Space

• 100 GB on system drive

• 200-400 GB on data drive

(required for SQL Server)

Page 10: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

More than 20,000 users

Netwrix Auditor

Processor – 4 Cores

RAM – 32 GB RAM

Disk Space

• 300 GB on system drive

• 1 TB on data drive (required for

Long-Term Archive)

SQL Server Standard/Enterprise

Processor – 4 Cores

RAM – 32-64 GB RAM

Disk Space

• 100 GB on system drive

• 1TB on data drive

(required for SQL Server)

SQL reporting Services

Processor – 4 Cores

RAM – 32 GB RAM

Disk Space

• 100 GB on system drive

Page 11: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Not meeting system requirements – SQL

Using SQL Server Express in big environments

Storing SQL databases on the system drive of

the Netwrix Server

Page 12: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Netwrix Auditor Configuration Mistakes

Adding all data sources to the

same monitoring plan

Page 13: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Netwrix Auditor Configuration Mistakes

Using the same database for

different monitoring plans

Page 14: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Netwrix Auditor Configuration Mistakes

Adding a data source

without understanding what it does

Page 15: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Netwrix Auditor Configuration Mistakes

Excessive usage of the product features

Page 16: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Netwrix Auditor Configuration Mistakes

Not maintaining Netwrix server –

ignoring health status / summary emails

Page 17: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Netwrix Auditor Configuration Mistakes

No control over the quality of

collected data – not checking reports

Page 18: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

No control over the quality of collected data

No Data Check Reports

Incorrect Data –System Values

Check health log, or contact Support team

Noisy data Omit Lists

Useful links: https://www.netwrix.com/knowledge_base.htmlhttps://helpcenter.netwrix.com/Omit_lists/Exclude_Objects_from_Auditing_Scope.html

Page 19: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Netwrix Auditor Configuration Mistakes

Not configuring recipients for daily summary emails

Page 20: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Netwrix Auditor Configuration Mistakes

Not setting “Password never expires”

for DPA

Page 21: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Netwrix Auditor Configuration Mistakes

Not setting “Password never expires”

for DPA

Page 22: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Netwrix Auditor Configuration Mistakes

Utilizing Real User Profile for DPA

Page 23: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

How to Contact Support Team

• Phone

United States +1.888.638.9749

United Kingdom +44 (0) 203 588 3023

Other International +1.201.490.8840

• Customer Portal – https://www.netwrix.com/support.html

Page 24: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

What Can You Expect?

• Support Hours

Basic Support: Monday – Friday 8AM – 5PM Local Time (Business Hours)

Standard Support: Monday – Friday 12AM – 11:59PM (24 Hours)

• Strong Front Line Support 97% Tier 1 Resolution Rate

• Closing cases is NOT our primary support goal

Page 25: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Questions?

Page 26: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Prize Drawing

Page 27: 10 Common Netwrix Auditor Configuration Mistakes...Between 500 and 1,000 users Netwrix Auditor Processor - 2 Cores RAM –8 GB RAM Disk Space • 100 GB on system drive • 100-200

Thank you!