netwrix auditor deep dive€¦ · netwrix auditor deep dive how to secure your cisco and fortinet...

Post on 28-Jun-2020

35 Views

Category:

Documents

0 Downloads

Preview:

Click to see full reader

TRANSCRIPT

Netwrix Auditor

DeepDiveHow to Secure Your Cisco and

Fortinet Devices from Attackers

Welcome

Netwrix Solutions Engineer

Email: roy.lopez@netwrix.com

Roy Lopez

Top 5 Network Device Incidents

Briefly about Netwrix

Netwrix Auditor for Network Devices

Q&A

Agenda

#1: Configuration Changes

Protocols, ports and connection limits

Modifications of Group Policy

New users or groups

#2: Repeated Failed Logon Attempts

• Successful logons to network devices

are they fully authorized?

• Multiple failed logon attempts

Is someone trying to brute-force administrative credentials?

#3: VPN Logon Attempts

• Who tried to access network devices over a VPN?

• Which IP address was the authentication attempt made from?

• What was the cause of each failed VPN logon?

• When was each VPN logon attempt initiated?

• What device was the user attempting to log on to?

#4: Hardware Malfunctions

Underperfomance Complete shutdown

#5: Scanning Threats

• Which host and subnet were scanned?

• When was each scanning attempt performed?

• Which IP address was the scanning initiated from?

• How many scanning attempts were made from each IP address?

About Netwrix Auditor

Netwrix Auditor is an agentless data security platform that empowers organizations to accurately identify

sensitive, regulated and mission-critical information and apply access controls consistently, regardless of

where the information is stored.

It enables them to minimize the risk of data breaches and ensure regulatory compliance by proactively

reducing the exposure of sensitive data and promptly detecting policy violations and suspicious user behavior.

Netwrix Auditor

“Swiss Army Knife” for Visibility Across the Entire IT

Active DirectoryWindows File Servers

Oracle Database

Dell EMC SQL Server

Exchange

NetApp

Office 365

SharePoint sMySQLOpenTextContent Suite

WebsitesPostgreSQL

Box

Salesforce

Google Drive

Windows Server

VMware

Network Devices

Azure AD

Nutanix Files

Audit

Data Discovery and Classification

Netwrix Auditor for Network Devices

Demonstration

Netwrix Auditor

Thank You!

www. .com

Questions?

Roy Lopez

Solutions Engineer

top related