立即与支持人员聊天
与支持团队交流

Change Auditor for VMWare 7.0.2 - User Guide

Change Auditor for VMWare Overview

•
Introduction
•
Features and benefits
•
Deployment requirements

Introduction

Proper auditing and log management for your VMware vCenter Server infrastructure components are critical for security and compliance, but they can prove nearly impossible in practice using native auditing tools.

Because vCenter was designed as a management application, not a security application, it lacks the granularity in policy enforcement required for secure deployments. And because there is no central console, you have got to repeat each process for each server, and you end up with a huge volume of data and a myriad of reports. That means proving compliance or reacting quickly to events is a constant challenge.

Your data security is also at risk because native event details are sparse and difficult to interpret. As a result, you may not find out about problems until it is too late. Moreover, because native trails can be deleted or overwritten, the integrity of the log data can be compromised — defeating the purpose of auditing in the first place. As a result, even the most skilled and diligent vCenter-based organizations are often left exposed to the security risks associated with inadequate auditing and log management.

VMware auditing helps you ensure the security, compliance and control of event activity and the security of VMware vCenter. It manages, audits, reports and alerts on vital changes to VMware’s infrastructure, including data centers, hosts, virtual machines and other resources associated with vCenter or ESX hosts.

* 
NOTE: Throughout the product and documentation, references to ‘ESX’ means all supported versions of ESX and ESXi.

This guide has been prepared to assist you in becoming familiar with Change Auditor for VMware. It is intended for network administrators, consultants, analysts, and any other IT professionals using the product.

•
For information on the core functionality available in Change Auditor regardless of the product license that has been applied, see the Change Auditor User Guide and the Change Auditor Installation Guide.
•
For event details, see the Change Auditor for VMware Event Reference Guide.

Features and benefits

•
Audit all critical changes
Extensive, customizable auditing and reporting for all critical changes to vCenter configuration settings, ESX hosts, folders, clusters, resource pools, virtual machines and users. You will get complete visibility into all changes over the course of time and in chronological order with in-depth forensics on who, what, when, where, and why including before and after values. With real-time alerts to any device, you will maintain constant awareness and the ability to respond to vital changes as they occur.
•
Track user activity
Tightens enterprise-wide auditing and compliance policies by tracking user and administrator activity such as additions, deletions, or changes to resources. With in-depth analysis and reporting capabilities, your vCenter infrastructure is protected from exposure to suspicious behavior or unauthorized access, and is always in compliance with corporate and government standards.
•
Turn irrelevant data into meaningful information to drive security and compliance
Eliminates guesswork-analysis reporting by translating isolated cryptic data into a series of meaningful events. You instantly get all information on the change you are viewing and all related events such as what other changes came from specific users. You also gain a better understanding of event trends with the ability to view, highlight and filter related events over the course of days, months and even years.
•
Automate reporting for corporate and government regulations
Utilizing Microsoft’s SQL Reporting Services (SRS), Change Auditor for VMware vCenter provides clean, meaningful security and compliance reports on the fly. With a built-in compliance library and you can easily build your own custom reports, proving compliance for standards such as Sarbanes-Oxley (SOX), Payment Card Industry Data Security Standard (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA), Federal Information Security Management Act (FISMA) and Statement on Auditing Standards No. 70 (SAS 70).

Deployment requirements

For a successful deployment, ensure that your environment meets the minimum system requirements. For information on Change Auditor system requirements, see the Change Auditor Release Notes. For details on installing Change Auditor, see the Change Auditor Installation Guide.

自助服务工具
知识库
通知和警报
产品支持
下载软件
技术说明文件
用户论坛
视频教程
RSS订阅源
联系我们
获得许可 帮助
技术支持
查看全部
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级