“Seeing what the users are doing in multiple different areas is really what made us purchase. It gives us a lot more detail of our internal network.” Country Casual, USA
Here we have the usual suspects when it comes to user problems on networks. Do you recognize anyone? If so read on and learn how LANGuardian can finally show you what users are doing on your network without the need for agents or log files.
Users interact with the network in many different ways during the average day. They visit websites, open and close files on file shares, send and receive email, interact with line-of-business applications and databases, download files from the Internet, upload photos and videos to sites such as Flickr and YouTube, perform online backups, and more.
These activities consume bandwidth and disk space and can sometimes – usually unintentionally – expose the network to intrusions, malware, ransomware, viruses, spambots, spybots, viruses, phishing attacks, and other security risks.
LANGuardian can monitor user activity by analysing network traffic. Typically LANGuardian is connected to a SPAN or mirror port and it uses deep packet inspection techniques to extract the user metadata from network packets. This technique is also known as wire data analytics. User names are also shown though integration with Active Directory.
A web-based user interface provides access to the traffic data in the database. As it works on traffic data, there is no client software to install, no interaction with the devices on the network, and no impact on network performance. Finally you can now monitor user activity from one single console.
With LANGuardian it is easy to see all activity associated with a user. Customizable dashboards display user activity in real time, listing for example the Top current users of bandwidth. To get more detail on how they are using up all the bandwidth simply click on the total.
The user dashboard gives you a consolidated way to monitor user activity which helps to detect and investigate many different situations, including:
- Access to Windows file shares
- Transactions involving SQL Server databases
- Data leakage – files transferred outside the network
- Files downloaded from the Internet
- Use of specific ports and protocols
- Use of unauthorized applications and devices
- Use of a proxy server to gain access to prohibited websites
The user dashboard is also invaluable in a more general troubleshooting and monitoring context. For example, if you view a LANGuardian bandwidth usage report and notice that a user is consuming a disproportionately large amount of bandwidth, you can switch to the user dashboard and see a summary of that user’s network activity. From the user dashboard, you can drill down into details and identify the root cause of the user’s high bandwidth consumption. This is why LANGuardian is a really efficient way to monitor user activity.
You can use the search menu to find information on bandwidth troubleshooting, network forensics, file share activity or web activity. Alternatively, the user activity dashboard gives you a summary of all network activity from a user perspective. From these starting points, you can drill down to more details on each type of activity.
You can also use LANGuardian to investigate and report on past activity by users as it stores historical traffic data. You can use this data for advanced forensic analysis, creating audit trails, and troubleshooting problems that manifest themselves over a long period of time. If you need to monitor user activity then LANGuardian is an ideal solution.
The most common ways customers monitor user activity are as follows:
- Find out who deleted a file on the network
- Report on all applications associated with a user
- Find out what website a user was accessing
- Report on what users accessed a file or folder
- Find out how who are the top users of bandwidth
- Locate users responsible for bringing malware into networks
- Track what users are responsible for copyright infringements
- Show what users are copying the most amount of data to and from a server
Monitor User Activity – Your Next Steps:
Learn more about user activity logging.
If you have any questions about how LANGuardian can monitor user activity, please contact us. If you would like to see LANGuardian in action, please try our online demo system or download a free 30-day trial to try it on your own network with your own data.
Talk to us now
Talk to NetFort today. Contact us at firstname.lastname@example.org or call us at +1 (646) 452 9485 or +353 (91) 520 501 in EMEA.