Supported Data Sources
This section lists platforms and systems that can be monitored with Netwrix Auditor.
Active Directory domain
Active Directory Federation Services
Exchange
Office 365 and Azure AD
SharePoint
File storage systems
Network devices
Databases
Considerations for Oracle Database Auditing
Windows server
VMware server
| Data source | Supported Versions |
|---|---|
|
|
Domain Controller OS versions:
|
|
|
|
Azure Active Directory version provided within Microsoft Office 365 Microsoft GCC High (government community cloud high) and DoD tenant types are not supported. NOTE: You may need to take some preparatory steps, depending on the authentication method you want to use for collecting Azure AD and Office 365 data. See For Office 365 and Azure AD Auditing. |
|
|
|
|
Exchange Online version provided within Microsoft Office 365. NOTE: Microsoft GCC High (government community cloud high) and DoD tenant types are not supported. |
|
Consider the following:
NOTE: If your Netwrix Auditor version is earlier than 9.9, consider that DFS namespace processing logic differs from the current (implemented in line with Microsoft recommendations). See also Actions, Object Types and Attributes Monitored on File Servers. |
|
NOTE: Only CIFS configuration is supported. For Dell EMC Isilon, auditing of System zone is not supported. As stated by Dell, this zone should be reserved for configuration access only. Current data should be stored in other access zones. See this guide for more information. |
|
NOTE: For NetApp storage systems, only CIFS configuration is supported. |
|
|
|
|
Cisco devices
Fortinet Fortigate
SonicWall
Juniper Networks
Palo Alto
Pulse Secure
Aruba
|
|
|
|
|
|
|
SharePoint Online version provided within Microsoft Office 365 NOTE: Microsoft GCC High (government community cloud high) and DoD tenant types are not supported. |
|
NOTE: Only stand-alone SQL Servers can be audited. Auditing of Always-On Availability groups is not supported. Linux-based versions are not supported. |
|
|
|
|
|
|
|
|
Windows Server OS:
|
|
| DHCP |
Windows Server OS:
|
|
IIS 7.0 and above |
|
User Activity data source can support around 300 targets with one user session per target without scalability issues:
We recommend using the User Activity auditing only for those infrastructure areas that require more attention due to their sensitivity/criticality. Applicable usage scenarios include, for example:
|
Considerations for Oracle Database Auditing
Starting with version 9.95, Netwrix Auditor for Oracle Database is focused on versions 12c and above. It means that Oracle Database 11g users will not be able to benefit from latest features and improvements of the product. Oracle Database 11g users should also consider its support expiration dates set by the vendor. So, when planning your Netwrix Auditor deployment, consider the following:
-
Several limitations apply to Oracle 11g support in Netwrix Auditor 9.96:
- Oracle wallets are not supported
- Lightweight drivers for Oracle Instant Client are not supported
-
Netwrix Auditor client UI does not display any warnings and / or errors regarding to trail audit mode operation
- If you are using Oracle Database 11g and Netwrix Auditor 9.9 (or earlier) and do not plan to upgrade your deployment, you will have all 9.9 capabilities unchanged.
- If you are using Oracle Database 11g and have performed seamless upgrade to Newrix Auditor 9.96, the audit data collection will operate properly. However, consider General Considerations and Known Issues and keep in mind Oracle Database 11g support expiration dates.
If you are using Oracle Database 12c or later, make sure you have Unified auditing mode enabled. Otherwise, Netwrix Auditor may not operate properly. Refer to Migrate to Unified Audit
Check out the following documentation sections:
Technology Integrations
In addition to data sources monitored within product, Netwrix Auditor supports technology integrations leveraging Integration API. Download free add-ons from Netwrix Auditor Add-on Store to enrich your Netwrix Auditor audit trails with activity from the following systems and applications:
| Integration | Supported Versions |
|---|---|
|
RADIUS server |
|
|
Amazon Web Services |
Version currently provided by Amazon |
|
Generic Linux Syslog |
|
| CyberArk Privileged Access Security | Version 10.10. |
| Microsoft Hyper-V SCVMM | Microsoft System Center Virtual Machine Manager 2019, 2016 |
| Nutanix AHV | Nutanix AOS 5.11 |
For more information about add-ons, refer to Add-Ons. Also, there are even more add-ons that can export data collected by Netwrix Auditor to other systems (e.g., ArcSight and ServiceNow).