NetFort Technologies

User and network visibility features

Achieve unique levels of visibility into user behaviour and network activity.

LANGuardian Microsoft™ FileShare Monitor

The combination of the LANGuardian’s traffic analysis engine, scalable database and our Active Directory and E Directory integration enable real time and historical tracking by user of files accessed, modified, downloaded and deleted on your network. See below, examples of User Activity reporting available through Microsoft™ File ShareMonitor Module.

Top MS Users (by Events)

Generates a list of all Users accessing files over the network using Microsoft SMB protocol, ranked by number of file access events. Filter by sensor, server, user and file action (map, read, write etc).Drilldown to a ranked list of files served, classified by user, or drilldown to Sessions report.

User Visibility Benefits

  • Enables a comprehensive audit trail on all file shares, saving time and money on troubleshooting
  • Leverage existing IT investment. Corrective action to take place where the LANGuardian highlights network resources that are subject to abuse by users
  • Ensures cohesiveness to IT security policies
  • Details on network user events
  • Total traceability and accountability

Top MS Clients (by Events)

Generates a list of all systems accessing files over the network using Microsoft SMB protocol, ranked by number of file access events.Filter by sensor, server, client and file action (map, read, write etc). Drilldown to a ranked list of files served, classified by client system, or drilldown to Sessions report.
 

Top MS Users (by Bandwidth)

Generates a list of all users accessing files over the network using Microsoft SMB protocol, ranked by bandwidth consumed. Filter by sensor, server and user. Drilldown to a ranked list of files served, classified by user , or drilldown to Sessions report. Output is similar to Top MS Users (by User Events).

 

Top MS Clients (by Bandwidth)

Generates a list of all systems accessing files over the network using Microsoft SMB protocol, ranked by bandwidth consumed. Filter by sensor, server and client. Drilldown to a ranked list of files served, classified by client system, or drilldown to Sessions report. Output is similar to Top MS Clients (by Events).

Search by Filename

Generates a list of all files accessed over the network using Microsoft SMB protocol, ranked by number of accesses. Filter by filename (supports regular expression: e.g .xls$) or access type (map, read, write, delete, rename). Drilldown to show a ranked list of files accesses, classified by client system.

Top MS Servers (by Events)

Generates a list of all systems serving files over the network using Microsoft SMB protocol, ranked by number of file access events. Filter by sensor, server, client and file action (map, read, write etc).Drilldown to a ranked list of files served, classified by client system, or drilldown to Sessions report.
 

Top MS Servers (by User Events)

Generates a list of all systems serving files over the network using Microsoft SMB protocol, ranked by number of file access events. Filter by sensor, server, user and file action (map, read, write etc). Drilldown to a ranked list of files served, classified by user , or drilldown to User Sessions report.

Top MS Servers (by Bandwidth)

Generates a list of all systems serving files over the network using Microsoft SMB protocol, ranked by bandwidth consumed. Filter by sensor, server and client.Drilldown to a ranked list of files served, classified by client system, or drilldown to Sessions report. Output is similar to Top MS Servers (by Events).


Top MS Servers (by User Bandwidth)

Generates a list of all systems serving files over the network using Microsoft SMB protocol, ranked by bandwidth consumed. Filter by sensor, server and user. Drilldown to a ranked list of files served, classified by user accessing files, or drilldown to Sessions report. Output is similar to Top MS Servers (by User Events).
 

Email Alerts

LANGuardian provides immediate notification on a wide variety of network and user events. Event-based reports are sent by email to specific individuals, based on the type of event and the corresponding staff responsibility. Specific events can be alerted to as they occur by email.