File System Auditor versions

v2.5 [Apr 29, 2011]
Shared folders provide end users the ability to remotely access data stored on file servers. Any changes to these shared folders or the permissions associated with them can have a serious affect on user productivity and network security. In order to ensure the proper access is maintained to network data, it is imperative to monitor any changes that occur to file shares.
File System Auditor now provides the ability to audit changes to file shares. Audit all events related to file shares including share creations, deletions, and security modifications. With this new functionality File System Auditor can help to ensure the proper access is maintained to shared data by auditing all changes to shares in real time, and alerting administrators when changes do occur.
File System Auditor adds a new agent deployment wizard which simplifies the installation and configuration process when deploying auditing agents to file servers. The agent deployment wizard allows for deploying the auditing agent to multiple servers simultaneously, eliminating the need to deploy and configure auditing agents independently.
All audit events collected by the File System Auditor agent will now include the workstation name and IP address of the client machine that initiated the event. This provides administrators and auditors with the information to know not only WHO made the change, but also WHERE the user was logged in at the time the change occurred.
Audit trail history typically must be retained for a certain period of time for compliance reasons. However, as time goes by old audit data may be backed up and archived so that it no longer needs to be stored in the audit database. Once archived, purging old data will help maintain the size of the auditing database which will conserve disk space and increase reporting performance. File System Auditor provides the ability to manually purge data at any time through the configuration console interface but previously did not provide the ability to automatically purge old data. With version , File System Auditor adds the ability to purge all data past a certain age on a scheduled basis.
File System Auditor adds support for auditing Windows Server 2008 R2 systems, along with console support on Server 2008 R2 and Windows 7 operating systems. The auditing database is now supported on SQL Server 2008.