InTrust

• Key to Compliance: Addresses regulatory compliance by collecting and reporting on event logs across the entire IT stack, monitoring user access to critical systems and applications and allowing you to perform forensic analysis of user and system activity based on historical event data.
• User Activity Tracking: Collects events on user and administrator activity from diverse and spread-out systems and applications and presents them in an easy-to-use and complete form suitable for ongoing reporting and ad hoc analysis. Extracts all the essential details of user access such as who performed the action, what that action actually entailed, which server it happened on and which user workstation it originated from.
• Automated Log Collection: Automates the secure collection of event logs, decreasing your workload.
• Log Data Compression: Provides unparalleled long-term compression, versus storing the same amount of event data in a database.
• Integridad de registros: le permite crear una ubicación en caché en cada servidor remoto donde los registros se pueden duplicar cuando se crean, lo cual evita que un usuario o un administrador deshonesto falsifique la evidencia de los registros de auditoría.
• Forensic Analysis: Provides tools for interactive searching through historical event log data for on-the-spot investigation of security incidents and policy violations and preparation of evidence suitable for submission to the court.
• Real-Time Alerting: Sends real-time alert notifications about unauthorized or suspicious user activity directly to you via email or to third-party monitoring applications such as Microsoft Operations Manager (MOM).
• Flexible Reporting: Gives you unprecedented access to predefined and customizable reports, supporting a wide variety of file formats, including HTML, XML, PDF, CSV and TXT, as well as Microsoft Word, Visio and Excel.
• Fault Tolerance: Provides automated server redundancy in the case of failure, enabling you to quickly move all configurations and jobs from a crashed server to a backup server to handle all activity and reducing the possibility of lost log files due to server failure.

Quest InTrust Manager

To create reports interactively using Quest Knowledge Portal:

• Microsoft .NET Framework 2.0

Note: Requirements for local or remote installation of Quest Knowledge Portal are listed in the Quest Knowledge Portal documentation.

Quest InTrust Server

For agent-server communication:

Computers that are supposed to run InTrust Server must be configured to allow for incoming connections on the TCP port on which your InTrust Servers are configured to communicate with agents (TCP port 900 by default).

For the configuration, alert and audit databases:

Any of the following:

• Microsoft SQL Server 2000 Service Pack 3a or later
• Microsoft SQL Server 2005
• Microsoft SQL Server 2008
• Microsoft SQL Server 2008 R2

Notes:

• A local or remote installation of SQL Server can be used.
• The collation order must be case-insensitive.
• Microsoft SQL Server Express Edition is not supported.

For reporting jobs:

• Web server based on Microsoft Internet Information Services (IIS) version 5.0 or later, with ASP.NET *
• Microsoft SQL Server 2005 or SQL Server 2008 Reporting Services**

Notes:

* A local or remote installation can be used. If you plan to use Microsoft IIS 6.0 or 7.0, make sure ASP extensions are allowed.

** A local or remote installation of Reporting Services can be used; Microsoft SQL Server Express Edition with Advanced Services is not supported.

For requirements on local or remote installation of Quest Knowledge Portal, refer to the Quest Knowledge Portal documentation.

For detailed system requirements for all the InTrust components and processed systems, see the Quest InTrust 10.4 System Requirements document supplied on the product CD.

• Top 11 Recommended Daily Reports for Monitoring the Windows/Active Directory Environment

  This webcast identifies a list of 10 daily reports for the Windows/Active Directory environments that will help you cover all the bases, from technology, to compliance, to information security.

  Watch the Archived Webcast »

• How to Perform Active Directory Forensic Analysis with InTrust

  Learn how to perform forensic analysis on Active Directory event logs using InTrust, Quest Software's solution for monitoring Windows, Unix and Linux event logs.

  Watch the Video »