Extending Change Auditing To Span Directory Services


	Advertise with Sarbanes Oxley Compliance Journal

News

< Back

Sarbanes Oxley : Technology : Change Detection

Extending Change Auditing To Span Directory Services

Enhances Security and Increase System Availability Across the Enterprise

Gene Kim
Chief Technology Officer
Tripwire

Tripwire, Inc., the leading provider of change auditing solutions, has announced Tripwire Enterprise 5.2. Tripwire has expanded the capabilities of its flagship product to now audit changes made to directory services, making it the only change auditing solution to independently detect, reconcile and report changes made to Active Directory and LDAP servers, beginning with Sun ONE Directory Server, as well as to underlying server file systems and network devices.

This provides IT operations and security managers with a single control point for auditing changes across heterogeneous IT infrastructure, enabling management to validate compliance, increase availability and enhance security.

Directory services allow IT operations and security administrators to centrally manage resources on a corporate network including user profiles and access permissions, application and system configurations, and network resources such as file and print servers. Undesired changes to directory services can cause serious problems including logon failure and account lockout, security and compliance-policy breaches, application failures, and service outages.

?As directory services are critically important to IT operations, sufficient controls must be in place to ensure their integrity and satisfy compliance requirements,? said Gene Kim, Chief Technology Officer, Tripwire, Inc. ?With so much network management being handled by directory services, companies need independent, detective controls to audit access and change?the two foundational transactions that affect IT compliance, availability, and security.?

In addition, Tripwire Enterprise 5.2 now offers customers:

• New reports: Including Change Windows reports that focus on changes made in- and outside change windows; and User Role reports, indicating who has access to what within Tripwire Enterprise, helping ensure segregation of duties. These and other new reports have been added to provide more detail for improved compliance reporting.

• HP OpenView Service Desk Integration: Auto-reconciliation of changes within authorized work tickets reduces the amount of time staff spends validating expected changes, giving them more time to focus on unexpected and potentially harmful changes.

• Oracle 10g Support: Allowing customers to leverage their existing Oracle investment and expertise, Tripwire Enterprise 5.2 can now also run on the Oracle 10g database, empowering change auditing with a high availability, enterprise class database.

• Expanded support to audit Solaris 10 x86 and Solaris10/SPARC file systems.

Tripwire Enterprise is the only independent change auditing solution that monitors servers, network devices, and directory servers on a single platform, validating desired change and notifying of undesired change to prove infrastructure integrity and process effectiveness. Additional benefits include:

• Ongoing compliance: By detecting, reconciling, and reporting changes regarding which users have permission to access critical applications and data, Tripwire Enterprise helps demonstrate compliance with Sarbanes-Oxley, GLBA, PCI and other regulations/standards. Reports show any noncompliant systems and processes that are ineffective or that have been circumvented.

• Enhanced security: Tripwire Enterprise enhances security by notifying of undesired changes, according to severity. In addition to who made the change, Tripwire Enterprise can show for Active Directory what, when, and how changes were made.

• Increased service availability: Tripwire Enterprise enforces change management processes to increase IT service availability, and if an outage occurs, quickly answers ?What changed?? Tripwire Enterprise quickly finds changes, focuses remediation efforts and can optionally direct third-party tools to immediately restore changed systems to their expected state, often before a service degradation or outage occurs.

A comprehensive change auditing solution requires three critical pieces: process, people and technology. Correspondingly, Tripwire Solutions include both software and professional services offerings. Its software offerings include Tripwire Enterprise and Tripwire for Servers, a proven change monitoring and analysis solution for servers running in small to mid-size organizations. Tripwire Professional Services offers a complete set of services ranging from product implementation and tuning to compliance related consulting, ITIL implementation, and organizational change management.

Tripwire is the leading provider of change auditing software and services. Tripwire solutions enable enterprises to prove that their IT change management controls are effective and their infrastructure is safe. Tripwire software provides proof of regulatory compliance, instills accountability for change, ensures the security of business-critical systems, and increases the overall availability of IT services. Tripwire is headquartered in Portland, Ore. with offices in the UK and Japan.

For more information visit http://www.tripwire.com.

About Us

Editorial