Supported Data Sources
The table below lists systems that can be monitored with Netwrix Auditor:
| Data source | Supported Versions |
|---|---|
|
Active Directory
|
Domain Controller OS versions:
|
|
Active Directory Federation Services |
|
|
Azure AD |
Azure Active Directory version provided within Microsoft Office 365 NOTE: Netwrix Auditor collects data through Office 365 APIs. In order to access these APIs, you should have an Office 365 business account with global administrator privileges associated with one of suitable Office 365 plans (e.g., Office 365 Enterprise E1). See Assigning a Privileged Role for Azure AD and Office 365 for more information. |
|
Exchange |
|
|
Exchange Online |
Exchange Online version provided within Microsoft Office 365 |
|
Windows File Servers |
NOTE: To collect data from 32-bit operating systems, network traffic compression must be disabled. To collect data from Windows Failover Cluster, network traffic compression must be enabled. Scale-Out File Server (SOFS) cluster is not supported. See File Servers for more information. |
|
Dell EMC |
NOTE: Only CIFS configuration is supported. For Dell EMC Isilon, auditing of System zone is not supported. As stated by Dell, this zone should be reserved for configuration access only. Current data should be stored in other access zones. See this guide for more information. |
|
NetApp |
NOTE: For NetApp storage systems, only CIFS configuration is supported. |
|
Nutanix Files |
|
|
Network Devices |
Cisco devices
Fortinet Fortigate
SonicWall
Juniper Networks
Palo Alto
Pulse Secure
Aruba
|
|
Oracle Database |
|
|
SharePoint |
|
|
SharePoint Online |
SharePoint Online version provided within Microsoft Office 365 NOTE: Netwrix Auditor collects data through Office 365 APIs. In order to access these APIs, you should have an Office 365 business account with global administrator privileges associated with one of suitable Office 365 plans (e.g., Office 365 Enterprise E1). See Assigning a Privileged Role for Azure AD and Office 365 for more information. |
|
SQL Server |
NOTE: Only stand-alone SQL Servers can be audited. Auditing of Always-On Availability groups is not supported. Linux-based versions are not supported. |
|
VMware |
|
|
Event Log |
|
|
Windows Server |
|
|
DNS |
Windows Server OS:
|
| DHCP |
Windows Server OS:
|
|
IIS |
IIS 7.0 and above |
|
User Activity |
|
Considerations for Oracle Database Auditing
Starting with version 9.95, Netwrix Auditor for Oracle Database is focused on versions 12c and above. It means that Oracle Database 11g users will not be able to benefit from latest features and improvements of the product. Oracle Database 11g users should also consider its support expiration dates set by the vendor. So, when planning your Netwrix Auditor deployment, consider the following:
-
Several limitations apply to Oracle 11g support in Netwrix Auditor 9.96:
- Oracle wallets are not supported
- Lightweight drivers for Oracle Instant Client are not supported
-
Netwrix Auditor client UI does not display any warnings and / or errors regarding to trail audit mode operation
- If you are using Oracle Database 11g and Netwrix Auditor 9.9 (or earlier) and do not plan to upgrade your deployment, you will have all 9.9 capabilities unchanged.
- If you are using Oracle Database 11g and have performed seamless upgrade to Newrix Auditor 9.96, the audit data collection will operate properly. However, consider General Considerations and Known Issues and keep in mind Oracle Database 11g support expiration dates.
If you are using Oracle Database 12c or later, make sure you have Unified auditing mode enabled. Otherwise, Netwrix Auditor may not operate properly. Refer to Migrate to Unified Audit
Check out the following documentation sections:
Technology Integrations
In addition to data sources monitored within product, Netwrix Auditor supports technology integrations leveraging Integration API. Download free add-ons from Netwrix Auditor Add-on Store to enrich your Netwrix Auditor audit trails with activity from the following systems and applications:
| Integration | Supported Versions |
|---|---|
|
RADIUS server |
|
|
Amazon Web Services |
Version currently provided by Amazon |
|
Generic Linux Syslog |
|
| CyberArk Privileged Access Security | Version 10.10. |
| Microsoft Hyper-V SCVMM | Microsoft System Center Virtual Machine Manager 2019, 2016 |
| Nutanix AHV | Nutanix AOS 5.11 |
For more information about add-ons, refer to Add-Ons. Also, there are even more add-ons that can export data collected by Netwrix Auditor to other systems (e.g., ArcSight and ServiceNow).