Netwrix Auditor vs. Proofpoint Insider Threat Management

Netwrix [Auditor] is a great tool for any SysAdmin no matter the company size. Licensing is determined by users, not employee count, and that makes it a great product from a small business to an enterprise application. The time savings coupled with the increased productivity is a key factor is determining this tool over other products.

Incentivized

Proofpoint Insider Threat Management (ObserveIT) is well suite for organization that are ready to implement risk based solution and do not compare it feature by feature with Classic DLP products. It's aim to analyze and prevent misuse(both accidental or intentional) and educate users.

Incentivized

• Netwrix Auditor performs the audit collection process in a method that does not burden the systems it is auditing. It usually just pulls the log and event logs data from the machine it is auditing and then performs the extraction of the information in these files on the Netwrix Auditor server. This reducing the audit processes to only pulling log data from the server but does not keep the server busy processing the data.
• Once the log data has been pulled from a server being audited, Netwrix will store the log data in a compressed form in its Long Term Archive. This allows the database to be kept smaller than the all the data being kept in the Log Term Archive and therefore makes creating reports much faster since the database is not as big as it could be.
• Since Netwrix Auditor uses standard Microsoft SQL Server and SQL Server Reporting Services (SSRS) to perform reporting, working with the results of the audit is much easier. Anyone who knows SQL Server and SSRS can work with the data and create their own reports.
• The predefined reports that come with Netwrix Auditor cover most of the items required to properly report on the status of a system. They have many predefined reports for FedRamp, PCI, HIPPA, and other compliance regulations.

Incentivized

• Takes screen captures of user's activities to understand suspicious activities better.
• User friendly management interface makes it better.
• Ease of upgrading all of the related servers and its agent.

Incentivized

• There is a bit of a learning curve. The interface is fairly intuitive, but I think there is room for improvement.
• There is a LOT of functionality which can be quite overwhelming at first, but in and of itself, not a bad thing.
• I think this software would benefit from a "Simple" mode and "Advanced" mode. This would ease the learning curve a bit.

Incentivized

• it can be more affordable
• Many organization are not ready to implement insider threat solutions and prefer classic DLP
• don't have more dislikes

Incentivized

We have renewed already the licensing of the product minus SQL Server and Oracle Database because the organisation believes the modules are very expensive and have identified a different product for auditing Databases Other modules are very important like the User Activity monitor, AD queries that we can not get from the native AD itself or you have to run complicated powershell scripts! Easy to use interface Pre-defined Reports Easy way to subscribe to important alerts e.g Privilege account group membership changes

Incentivized

It depends on the our needs actually. Audit has big space on our environment, so we need to put anything infront of them clearly. ObserveIT makes it perfectly.

Incentivized

Netwrix is easy to use; it has a simple reporting system and modules for each area, e.g., exchange, active directory, and Azure. The user interface is quite basic but easy to navigate and is only seen by administrators anyway. Reports can be generated that are meaningful and in a clear format.

Incentivized

Customer support has always been fast and helpful when we run into any issues. The smaller issues are usually resolved within a day or two. It is great support and I feel like I am in good hands anytime an issue comes up. However, we don't run into many issues

Incentivized

Easy to access them, immediate response and huge knowledge make them nearly perfect. Also their supports have great sense of humour :)

Incentivized

Make sure you trial the software and understand the fundamentals of each module that you are interested in Make sure you get the buy in from both Management and most importantly your team members (the product users) for a successful implementation Watch the webinars of the product from the product website

Incentivized

I can only compare it to SolarWinds. Their similar products have larger foot prints and seem a little clumsy in comparison. The Netwrix product turns on a lot of the auditing options that were required for the product to work properly where it seemed I had to do a lot of manual tweeking with the SolarWinds product.

Incentivized

Proofpoint Insider Threat Management (ObserveIT) is so called next generation of DLP systems ensuring that you can use it after deployment, no need to create comprehensive regex and patterns of data

Incentivized

• 2 men 4 four rule is eliminated.
• System administrators are on their toes now and very attentive before performing and change.
• Change management is followed properly.
• Compliance is implemented as it should be.
• Housekeeping of servers is done.
• AD users maintained well.

Incentivized

• Organization will benefit DBA activity and Privileged Access analytics
• Ensures user privacy by anonymizing
• You get full visibility of insider threats and solution can reduce costs by using out-of the box risk activity library

Incentivized