With LANGuardian File Activity Monitoring software you can tell exactly what is happening on your Windows file shares.
It monitors and records every access to file shares, recording details of user name, client IP address, server name, event type, file name, and data volume. Just setup a SPAN or mirror port to sniff the traffic. No agents or client software required and no need to enable auditing on your file servers.
LANGuardian stores this information in its database, and uses it as the basis for a wide range of reports that you can access via the browser-based user interface. It is the only file activity monitoring solution that you will need.
With the unique level of insight it offers into activity on a Windows network, LANGuardian will quickly become an indispensable part of your network management and system administration toolkit. You can apply it to a wide range of troubleshooting and monitoring tasks, for example:
- Finding out what files or folders have been deleted from a file share and who deleted them.
- Locate the source of Ransomware on your network.
- Identifying the users who have accessed a specific file or file share over a specific time period.
- Counting how many files of a given type are shared on the network.
The file activity monitoring feature in LANGuardian is powerful and easy to use. You simply enter an IP address (subnets are also supported), a username, or a filename, then click Go. LANGuardian returns a report showing a summary of all information matching the IP address, user, or file you specified. You can then drill down into the details of a specific file or folder, to see details of each action (open, close, read, write, create, and so on) and the time it was performed.
How it works
At a technical level, LANGuardian file activity monitoring works by analyzing network traffic that uses the Microsoft Server Message Block (SMB), a network file-sharing protocol that facilitates sharing of data between clients and servers. SMB is primarily a Windows-based protocol, but a number of third-party products exist to make it available on other platforms including OpenVMS, HP-UX, Solaris, Novell Netware and Linux. The open-source implementation, Samba, is the most widely used. LANGuardian can monitor file share activity on any platform that implements the SMB protocol.
File Activity Monitoring – Your Next Steps:
If you have any questions about LANGuardian file activity monitoring, please contact us. If you would like to see LANGuardian in action, please try our online demo system or download a free 30-day trial to try it on your own network with your own data.
Talk to us now
Talk to NetFort today. Contact us at firstname.lastname@example.org or call us at +1 (262) 374 3311 or +353 (91) 520 501 in EMEA.
How to buy
We offer perpetual and subscription LANGuardian licenses based on the number of users on your network and the number of sensors you want to deploy. Specialized features are provided as optional modules, so you do not pay for them if you do not need them.