Hi,
Please explain me the difference between change auditor and intrust.
Which tool I need to buy for active directory auditing.
From audit solution standpoint CA and InTrust complement each other:
-First, buy CA for quick and solid win: known successful AD changes, Exchange Non-owner mailbox access, NTFS specified File Access etc. That is CA was designed and became an audit solution leader in the industry. (Note, CA “listens”, analyzes and produces own great logging events for specified platforms *without noise*)
-Second, regroup, and to improve and extend the audit solution, buy InTrust to collect and store *exact copy of native logs* with high volume of logging (like Logon Activity, Success/Failure etc.). Especially, in highly regulated industry, legal requirements might require to report on exact copy of native logs for 1y or more, even if 99% of the native logs is a *noise*
PS: in case you need assistance on technical side of the story you may contact Quest or One Identity consultants (my name, for example)
From audit solution standpoint CA and InTrust complement each other:
-First, buy CA for quick and solid win: known successful AD changes, Exchange Non-owner mailbox access, NTFS specified File Access etc. That is CA was designed and became an audit solution leader in the industry. (Note, CA “listens”, analyzes and produces own great logging events for specified platforms *without noise*)
-Second, regroup, and to improve and extend the audit solution, buy InTrust to collect and store *exact copy of native logs* with high volume of logging (like Logon Activity, Success/Failure etc.). Especially, in highly regulated industry, legal requirements might require to report on exact copy of native logs for 1y or more, even if 99% of the native logs is a *noise*
PS: in case you need assistance on technical side of the story you may contact Quest or One Identity consultants (my name, for example)
