What s New in Netwrix Auditor 9.7

Transcription

1 What s New in Netwrix Auditor 9.7 Jeff Melnick Manager, Pre-Sales Engineering Jeff.Melnick@netwrix.com

2 Agenda What s New in Netwrix Auditor 9.7 Briefly About Netwrix Auditor Q&A Prize Drawing

3 INTRODUCING NETWRIX AUDITOR 9.7 Detect and Block Attacks on Your Network Devices

4 WHAT S NEW IN NETWRIX AUDITOR 9.7 Network Devices Visibility into SharePoint Permissions User Profile Automated Response

5 Network Devices Detect and investigate network security threats

6 Why Do You Need Netwrix Auditor for Network Devices? Detect and investigate suspicious activity around network devices Enforce strong and effective controls Minimize costly network downtime

7 What Does Network Devices Provide? Visibility into changes to the configuration of Cisco and Fortinet firewalls, switches and routers Insight into successful and failed attempts to log on to network devices, including VPN logon attempts Visibility into remote access to your network Detection of scanning threats Visibility into hardware malfunctions of your network devices

8 Network Devices Demonstration

9 Visibility into SharePoint Permissions See who has access to what on your SharePoint

10 Why Do You Need Visibility into SharePoint Permissions? SharePoint is infamous for its complicated permissions layout, which is nearly impossible to untangle using only native tools. Seeing who has access to what enables companies to: Tighten access around sensitive data and enforce the least privilege principle Prove to auditors that you are able to control access to sensitive data Create a more manageable and transparent SharePoint environment

11 How Can You Use Visibility Into SharePoint Permissions? Analyze permissions to site collections with sensitive data Align user privileges with their responsibilities Identify broken inheritance

12 Visibility into SharePoint Permissions Demonstration

13 User Profile Speed investigations with information about suspicious accounts

14 What Is the Value Behind the User Profile? Who did that? Check account attributes in AD Check group membership in Netwrix Auditor Two extra steps Two new screens to switch between

15 What User Profile Details Can Be Used for? To accelerate investigations To make more informed response decisions in less time

16 User Profile Demonstration

17 Automated Response Ensure instant response to incidents

18 What Is the Value of Automated Response? Automated response saves you the time and trouble of responding to common and anticipated threats so you can allocate them to other more demanding tasks. Here s how it works in Netwrix Auditor: Account Lockout Automated Response Ticket Created Response time decreased

19 Automated Response Demonstration

20 Other Major Improvements

21 Other Major Improvements Customizable IT Risk Assessment dashboard Enhanced visibility into SQL Server logons and changes In Group filter in search and alerts

22 Other Major Improvements Demonstration

23 About Netwrix Auditor Netwrix Auditor A visibility platform for user behavior analysis and risk mitigation that enables control over changes, configurations and access in hybrid IT environments. It provides security intelligence to identify security holes, detect anomalies in user behavior and investigate threat patterns in time to prevent real damage.

24 Netwrix Auditor Unified Platform Netwrix Auditor Platform Active Directory Azure AD Exchange Office 365 Windows Server Windows File Servers EMC NetApp SharePoint Network Devices Oracle Database SQL Server VMware

25 The Big Picture P R O B L E M IT can t assess security posture and determine which assets need the most protection. P R O B L E M Lack of actionable intelligence makes it hard to prevent policy violations and data breaches. S O L U T I O N Proactively identify and mitigate IT security weak spots, and prioritize data protection efforts. Enhanced IT Risk Assessment Dashboard S O L U T I O N Gain full control over user permissions. Lock down overexposed data and prevent data breaches and privilege abuse. Visibility into SharePoint Permissions P R EDICT P R EVENT P R O B L E M Forensics teams can t analyze attacks to understand how they could have been stopped. R ESPOND DETECT P R O B L E M Incidents go unnoticed. Noise and alert fatigue make it hard to discern real threats. S O L U T I O N Automated Response and User Profile Trace attacks step by step to learn from them and prevent similar incidents in the future. S O L U T I O N Quickly identify real security threats with alerts on anomalous activity and details about high-risk user accounts. Network Devices

26 Next Steps Free trial: Set up Netwrix Auditor in your own test environment netwrix.com/auditor9.7 Virtual appliance: Get Netwrix Auditor up and running in minutes netwrix.com/go/appliance In-browser demo: Run a demo right in your browser with no need to install anything netwrix.com/go/browser_demo Join Liam Cleary and Jeff Melnick to learn about the core tenets of SharePoint security

27 Questions & Answers What s New in Netwrix Auditor 9.7

28 Prize Drawing Time! DJI Mavic PRO

29 Thank you Thank You! Jeff Melnick Manager, Pre-Sales Engineering