User Session Auditor:
Features for Auditing remote access
Key Features
Versions and Pricing
What's right for you?
Record and Replay Windows Sessions
- Exact video playback of every Windows session
- Includes mouse movements, UI interaction and text entry
- Fast navigation, using DVD-like controls
Record and Replay Unix/Linux Sessions
- Exact video playback of every Unix and Linux session
- Includes command line interaction, text entry and underlying system calls
- Fast navigation, using DVD-like controls
Video Content Analysis Logs
- Captures details about each user action
- Application name, User name, Server, Window title, File or Resource
- Accessed, underlying system calls
- Interactive drilldown
- No need to replay hours of video to find what you need:
Generate Logs for Apps with No Logs
- Detailed log for every app, even those that have no internal logs
- Cloud apps (ex: salesforce.com), legacy apps (ex: customized accounting), commercial apps (ex: Excel, SQL query tools)
- Logs shows actual user action (files opened, screens viewed) instead of obscure technical details of system event log
SIEM Integration
- Display user activity text logs within SIEM reports and dashboards
- Launch video replay of user action from within any SIEM
- Correlate ObserveIT video replay with any other log data for on-the-spot audit clarifications
- Open standards for data integration, plus native integration connector available for Splunk, Arcsight, RSA enVision and CA UARM
Privileged Identity Management
- Require shared-id users (ex: "administrator") to add secondary login credentials
- Adds an additional level of system access control for sensitive resources
- Manage users locally or tie in to Active Directory or CA PUPM user management
- Eliminates the shroud of secrecy associated with generic id's
Database Management
- Selectively archive video recording data
- One-click access archive data
- Flexible storage options via SQL database or file system
4-Eyes Session Privacy Dual Password
- Specify a second password (not managed by the ObserveIT administrator) that is required to replay video
- Ensure audit completeness as well as employee privacy
- In the most typical usage, Management (via ObserveIT Administrator) holds the main ObserveIT password, and a union rep or legal council holds the second password
- Satisfy the most stringent privacy protection regulations, including BDSG (Germany), CNIL (France), DPD 95/46/EC (EU), Human Rights Act (UK)
User Messaging
- Send policy and status updates to each user exactly as they log in to server
- Ensure that corporate standards are understood and acknowledged
- Capture admin support ticket number for issue tracking
Real-time Playback
- Sessions recordings are immediately available once session begins
- View session activity "on the air", while users are still active
Agent API Interface
- Control the ObserveIT Agent via scripting and custom DLLs from within your corporate applications
- Start, stop, pause and resume recorded sessions based on custom event triggers
- Trigger activity based on process IDs, process names or web URLs
Report Generator
- Create your own custom reports
- Schedule reports to run automatically for email delivery
- Export Excel or XML data
Complete coverage
- Agnostic to network protocol and client application
- Captures all remote sessions and also console sessions
- Supports SSH, Telnet, Terminal Services, Citrix, Remote Desktop, PC-Anywhere, VMware, VNC, Dameware and more
System Monitor Integration
- Instant replay from within network management (SCOM, Unicenter, Tivoli, OpenView and more)
- Real-time alerts on any user action (file access, network share, registry edit, URL access)
Robust Security
- Agent-Server encryption
- Digital Signatures
- Watchdog mechanism
Event-Driven Rules
- Granular policy rules per server, user or user group
- Determine include/exclude of recording and metadata capture
- Specify stealth mode and user identification requirements
Pervasive User Permissions
- Granular permissions / access control
- Permission-based filtering affects all content access (reports, search results, etc.)
- Satisfies regulatory requirements
Small Footprint
- Ultra-efficient data storage: Less than 250GB/year for high-usage, 1000 server environment
- Minimal Agent CPU utilization: 0% CPU when no console active, 1%-2% CPU, 10 MB RAM during session
