I work for a mid-size company, and we're starting to look into behavioural analytics for our staff ("How do they do this, that and this"?), in relation to access control and data usage. This is both for security and to try and improve overall business process.
Therefore, we are attempting to implement local file server monitoring to see specific functions performed by staff, such as:
- Who accessed this file;
- This user deleted a file;
- This user renamed a file;
- This user copied the file etc.
The benefits are we have a product that manages, in real time, file access and performs informative reporting - user access, user behaviour analysis, file breach, sensitive data leakage and other functions.
We know of tools such as Varonis, Lepide and Netwrix and have trialled them - rather nice - however, the price unfortunately is out of question - for Lepide, it is something like $630USD/file server a year. Multiply this by 85 and we're at $50,000.00 per year just for this tool.
I was aware of Auditing File Access using windows, however this has many limitations:
- Relies on a script - I.E. we may need to add hosts to the script for example
- Non-GUI products may deter other staff from usage (HelpDesk and Management for example)
- Requires several additional scripts to perform monitoring reports.
Requirements for a successful product:
- Must be capable of monitoring several file servers;
- Must have reporting capabilities;
- Must be autonomous;
Preferences:
- Free, or single purchase;
- Run on Windows, however, Linux is fine;
- Has a GUI
