Hi,
There seems to be many 3rd party solutions available for NetApp NAS auditing.
Anyone using those? Any pros and cons?
br, sk
The term auditing can mean different things. Are you looking for something that will keep a database of actions done by users to files?
On Tue, Dec 8, 2020 at 9:31 AM Sami Kapanen sami.kapanen@hamk.fi wrote:
Hi,
There seems to be many 3rd party solutions available for NetApp NAS auditing.
Anyone using those? Any pros and cons?
br, sk
Toasters mailing list Toasters@teaparty.net https://www.teaparty.net/mailman/listinfo/toasters
Yes, need to audit the usage and access of files in some shared secure folders,
br, sk
From: Basil basilberntsen@gmail.com Sent: tiistai 8. joulukuuta 2020 17:45 To: Sami Kapanen sami.kapanen@hamk.fi Cc: toasters@teaparty.net Subject: Re: 3party NetApp NAS auditing software?
The term auditing can mean different things. Are you looking for something that will keep a database of actions done by users to files?
On Tue, Dec 8, 2020 at 9:31 AM Sami Kapanen <sami.kapanen@hamk.fimailto:sami.kapanen@hamk.fi> wrote: Hi,
There seems to be many 3rd party solutions available for NetApp NAS auditing.
Anyone using those? Any pros and cons?
br, sk
_______________________________________________ Toasters mailing list Toasters@teaparty.netmailto:Toasters@teaparty.net https://www.teaparty.net/mailman/listinfo/toasters
Generically, there are software solutions that use fpolicy to receive the stream of events. The one I know that is most popular is Varonis Datadvantage, however it’s somewhat expensive. You also need to be careful about performance, it’s easy to configure it in a way that will cause significant issues to clients.
On Wed, Dec 9, 2020 at 4:05 AM Sami Kapanen sami.kapanen@hamk.fi wrote:
Yes, need to audit the usage and access of files in some shared secure folders,
br,
sk
*From:* Basil basilberntsen@gmail.com *Sent:* tiistai 8. joulukuuta 2020 17:45 *To:* Sami Kapanen sami.kapanen@hamk.fi *Cc:* toasters@teaparty.net *Subject:* Re: 3party NetApp NAS auditing software?
The term auditing can mean different things. Are you looking for something that will keep a database of actions done by users to files?
On Tue, Dec 8, 2020 at 9:31 AM Sami Kapanen sami.kapanen@hamk.fi wrote:
Hi,
There seems to be many 3rd party solutions available for NetApp NAS auditing.
Anyone using those? Any pros and cons?
br, sk
Toasters mailing list Toasters@teaparty.net https://www.teaparty.net/mailman/listinfo/toasters
I used Varonis back in the day on 7-mode. We had issues with folks moving or deleting files and varnois helped with that. Also exposed CIFS wide open shares. Not cheap, but was effective and also helped with some cleaning up of security groups and who/when folks were accessing files/shares.
From: Toasters toasters-bounces@teaparty.net on behalf of Basil basilberntsen@gmail.com Date: Wednesday, December 9, 2020 at 3:50 AM To: Sami Kapanen sami.kapanen@hamk.fi Cc: "toasters@teaparty.net" toasters@teaparty.net Subject: Re: 3party NetApp NAS auditing software?
Generically, there are software solutions that use fpolicy to receive the stream of events. The one I know that is most popular is Varonis Datadvantage, however it’s somewhat expensive. You also need to be careful about performance, it’s easy to configure it in a way that will cause significant issues to clients.
On Wed, Dec 9, 2020 at 4:05 AM Sami Kapanen <sami.kapanen@hamk.fimailto:sami.kapanen@hamk.fi> wrote: Yes, need to audit the usage and access of files in some shared secure folders,
br, sk
From: Basil <basilberntsen@gmail.commailto:basilberntsen@gmail.com> Sent: tiistai 8. joulukuuta 2020 17:45 To: Sami Kapanen <sami.kapanen@hamk.fimailto:sami.kapanen@hamk.fi> Cc: toasters@teaparty.netmailto:toasters@teaparty.net Subject: Re: 3party NetApp NAS auditing software?
The term auditing can mean different things. Are you looking for something that will keep a database of actions done by users to files?
On Tue, Dec 8, 2020 at 9:31 AM Sami Kapanen <sami.kapanen@hamk.fimailto:sami.kapanen@hamk.fi> wrote: Hi,
There seems to be many 3rd party solutions available for NetApp NAS auditing.
Anyone using those? Any pros and cons?
br, sk
_______________________________________________ Toasters mailing list Toasters@teaparty.netmailto:Toasters@teaparty.net https://www.teaparty.net/mailman/listinfo/toastershttps://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.teaparty.net%2Fmailman%2Flistinfo%2Ftoasters&data=04%7C01%7CSteve.Klise%40wwt.com%7C21d8baccb1a14953de9508d89c3895f1%7Ca2d8e6b4e26e44218f3dec288c827c7d%7C1%7C1%7C637431114150847726%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=65nJswbAhJvj20GsVF2mI1M0iX2A9CcZ%2BPNQf10uDlI%3D&reserved=0
some alternatives that are less expensive that I know some large customers use (banks and eda):
cleondris, stealthbits.
On 12/9/2020 10:25 AM, Klise, Steve wrote:
I used Varonis back in the day on 7-mode. We had issues with folks moving or deleting files and varnois helped with that. Also exposed CIFS wide open shares. Not cheap, but was effective and also helped with some cleaning up of security groups and who/when folks were accessing files/shares.
*From: *Toasters toasters-bounces@teaparty.net on behalf of Basil basilberntsen@gmail.com *Date: *Wednesday, December 9, 2020 at 3:50 AM *To: *Sami Kapanen sami.kapanen@hamk.fi *Cc: *"toasters@teaparty.net" toasters@teaparty.net *Subject: *Re: 3party NetApp NAS auditing software?
Generically, there are software solutions that use fpolicy to receive the stream of events. The one I know that is most popular is Varonis Datadvantage, however it’s somewhat expensive. You also need to be careful about performance, it’s easy to configure it in a way that will cause significant issues to clients.
On Wed, Dec 9, 2020 at 4:05 AM Sami Kapanen <sami.kapanen@hamk.fi mailto:sami.kapanen@hamk.fi> wrote:
Yes, need to audit the usage and access of files in some shared secure folders, br, sk *From:* Basil <basilberntsen@gmail.com <mailto:basilberntsen@gmail.com>> *Sent:* tiistai 8. joulukuuta 2020 17:45 *To:* Sami Kapanen <sami.kapanen@hamk.fi <mailto:sami.kapanen@hamk.fi>> *Cc:* toasters@teaparty.net <mailto:toasters@teaparty.net> *Subject:* Re: 3party NetApp NAS auditing software? The term auditing can mean different things. Are you looking for something that will keep a database of actions done by users to files? On Tue, Dec 8, 2020 at 9:31 AM Sami Kapanen <sami.kapanen@hamk.fi <mailto:sami.kapanen@hamk.fi>> wrote: Hi, There seems to be many 3rd party solutions available for NetApp NAS auditing. Anyone using those? Any pros and cons? br, sk _______________________________________________ Toasters mailing list Toasters@teaparty.net <mailto:Toasters@teaparty.net> https://www.teaparty.net/mailman/listinfo/toasters <https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.teaparty.net%2Fmailman%2Flistinfo%2Ftoasters&data=04%7C01%7CSteve.Klise%40wwt.com%7C21d8baccb1a14953de9508d89c3895f1%7Ca2d8e6b4e26e44218f3dec288c827c7d%7C1%7C1%7C637431114150847726%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=65nJswbAhJvj20GsVF2mI1M0iX2A9CcZ%2BPNQf10uDlI%3D&reserved=0>
Toasters mailing list Toasters@teaparty.net https://www.teaparty.net/mailman/listinfo/toasters
I wrote a blog showing end-to-end native NAS auditing setup for both CIFS and NFS at https://storageexorcist.wordpress.com/2020/06/03/ontap-native-nas-auditing-s.... NetAppDocs does a great job showing the ONTAP side, but this is a reference with docs help showing the entire setup including the client SACL to make auditing work.
On Wednesday, December 9, 2020, 01:19:21 AM PST, Sami Kapanen sami.kapanen@hamk.fi wrote:
Yes, need to audit the usage and access of files in some shared secure folders,
br,
sk
From: Basil basilberntsen@gmail.com Sent: tiistai 8. joulukuuta 2020 17:45 To: Sami Kapanen sami.kapanen@hamk.fi Cc: toasters@teaparty.net Subject: Re: 3party NetApp NAS auditing software?
The term auditing can mean different things. Are you looking for something that will keep a database of actions done by users to files?
On Tue, Dec 8, 2020 at 9:31 AM Sami Kapanen sami.kapanen@hamk.fi wrote:
Hi,
There seems to be many 3rd party solutions available for NetApp NAS auditing.
Anyone using those? Any pros and cons?
br, sk
_______________________________________________ Toasters mailing list Toasters@teaparty.net https://www.teaparty.net/mailman/listinfo/toasters
_______________________________________________ Toasters mailing list Toasters@teaparty.net https://www.teaparty.net/mailman/listinfo/toasters