Netwrix Auditor Reviews

Netwrix Auditor is a good product that audits all of the items we need to audit. It will audit file servers, database server, Active Directory Servers, SharePoint servers and a whole lot more. We use it for all of these items and the price did not go up because we added more machine types.

Netwrix can be a bit finicky at times. We have has it stop auditing a server because the configuration on the server was changed. It took a bit of work with support for them to realize that it shouldn't have stopped due to the configuration change and once they figured that out, they fixed the problem. Once we got the auditing to start, it picked up all of the items it missed while it wasn't auditing, so we lost nothing.

The website trial shows off the features of the software while also teaching how to perform a user access audit. The user interface is very clean, user-friendly, intuitive, and snappy. The software comes with a lot of explanations for the built-in reports to help users understand what the report is used for. The software also makes it really easy to monitor the organization, with alerts for unacceptable actions or for unusual behavior above thresholds.

Our IT department spent a long time working on getting some of the features and reports working, with some success, but many reports and features were never fixed after a whole year of working with support. Apparently Netwrix support was responsive, but their fixes often failed to work.

I liked I could get reports on who made changes to everything on my domain. I knew when someone adjusted a group policy, created a user, or made a change in SQL.

We set this up to monitor employees only. We did not want to monitor students or service accounts because of the extra cost. The count on the user side showed 2000+ and we were not licensed. I opened a support ticket with the company and was told not to worry about it because it would just not monitor any user because of the license. I didn't like the answer, but it was still monitoring so much more. Then a year later I was hit with a huge bill because we had 2000+ people being monitored. We decided to just turn of the service.

Easily identify the 4 W's: Who, what, when, where. Eliminates sifting through several event logs to find the relevant information. Allows easy investigation into changes not authorized or a failed system. Alerts easy to setup for notifications of items you need to know about.

Occasionally, services fail and don't stop, so monitoring the service doesn't tell you that there is a problem until it is too late. No preventative as I would like.

The amount of data you can collect about security events, group changes, object moves and deletions, system and file access (and much more) is astounding, especially considering the price. If I need to track something new that I wasn't thinking of when I bought this software, I only need to dig a little and there's something there already for me to utilize. The variety of things we can monitor...

Read more

I think that the UI change from the prior major version to the new was the most jarring. I suspect it wouldn't have been as difficult to understand had I started with the newest UI.

Easy to setup monitor AD, Logs, Events, etc customizable notifications visibility into files, Group Policy, Active Directory, Office 365, Azure, etc advanced features that help track down file actions, like screen captures or recordings of the actual event

The interface is sluggish can cause some network interference if not tuned properly cost

Allows you to setup email notifications to help keep your network and infrastructure secure. Works very well.

Cost. Is a little pricey for what you get. The overall product works well and is worth the money for what it provides.

Automation!! Set it and forget it. Once you set up the items you want to monitor, you have the ability to shift your focus to other important items and then be alerted when the criteria matches your rules.

A little complicated to get things working at first.

Consolidates logs, easy to access reports on AD/file server changes. You are also able to set up alerts for account lockouts, failed logins and more. Netwrix can also help detect ransomware by reporting on bulk file changes (thankfully this isn't an issue for us). The application is easy to set up and navigate.

Whilst the modular approach is great for price/budgeting, it's a shame you can't trial the different modules for 30/60/90 days before making a decision on which modules to implement.

Very easy to implement and support is readily available online. Integrat with Microsoft products and Windows.

Linux machines can't be aduited with it and SAP is also not covered, only Microsoft softwares supoorted.

Ease of installation and usage, Reporting, alerts, etc.

I noticed that the new version of Netwrix tends to eat up a lot more hardrive disk space, but this is due to fine tuning Audit. Without proper tuning, it will easily eat up 100GB - which is what I experienced.

This software takes your computer and server event logs and breaks them down into reports that you can easy view and understand exactly what is going on with your environment. You can also record what anyone does on your servers as a video. All reports can have real time notifications of events you select like multiple failed logins etc. It is also an amazing price for all that you get.

The only thing i have had is that the new version doesn't support Windows Server 2003-2008 so what i did was spun up 2 VM's for this software and ran an older version on one VM and the newest version on an other so I can have the old version monitor the 2003-2008 servers and the newest version monitor 2008 R2 to 2016.

Netwrix makes the process of auditing changes within our Active Directory environment very simple. We no longer have to spend additional time chasing down problems and what caused them. We can quickly evaluate what has recently changed, who changed it and then evaluate the best resolution without wasting time. This allows us to focus on the most important aspects of our jobs!

Netwrix does not have a lot of features that I do not find amazing. The only item that I can find that comes close to being a "con" involves the way that data is processed. I would love to find a method of auditing active directory and servers that do not involve granting Domain Admin rights to an account used for the product. It is understandable, though.

Netwrix Auditor audits a lot of different products such as SQL Server, Windows Servers, Active Directory and NetApp file servers. It is very consistent in its runs and produces reports and alerts that our US government clients fully accept. It has helped my company receive numerous accreditation for performing auditing properly.

It can be difficult to configure and sometimes fails during a heavy load. Although it may fail every now and then, it will go back and gather the information it missed in the last run and get backup to date on the audits.

We are a smaller financial institution with limited staff and the automated reporting has been a great time saver for me to review various selected events. There are more than enough predefined reports to meet many of our oversight needs

I do have some issues with trying to understand the licensing and when we had to had other modules. Perhaps someone coming from an IT administration or CIO background would understand it better.

The daily reporting is great at providing a snapshot of changes the environment for Information Security Officer. In our IT department we rely on the real-time alerts daily for user lockouts and other AD related changes to inform us of changes made so we can act accordingly.

It takes some time to get a handle on the on-demand reporting, but Netwrix provides a huge list of canned reports so you rarely have to create a customized report from scratch.

Netwrix provides a thorough, easy to use interface to address supporting documentation for almost all of our Microsoft audit requirements. We have been able to easily produce the documentation and evidence for all requests from our audit team with ease. Something that used to take a considerable amount of time to compile.

Would prefer that the client be web based, as opposed to the Windows client that is used today. Additional detail in error reports to help identify exactly what is not working would be extremely helpful as well. We occasionally have to do quite a bit of exploration to determine exactly what component is generating the error.

The fact that Netwrix always includes new and better features all of the time. Great price for the software and once it is in place and working it is very stable and solid. The new 9.0 version really allows for so much more than the old versions.

Some of the plugins are hard to use. I have a hard time figuring out what is causing errors sometimes when it runs its nightly scans of my systems. But customer support is always very good in helping solve the issues.

Netwrix Auditor was easy to deploy and you can very quickly gain deep insights into what is occurring in your environment. A huge positive is that a single application can provide data for so many different environments.

Not a knock against the software itself, but in some cases, requirements for certain audit features could be documented a bit better or more centrally. Perhaps this has been improved upon since my initial deployment 5+ years ago.

The alerting is incredibly valuable. Changes taking place to multiple files will generate an alert long before a human eye could notice what was happening. This is true of administrative logins and failed logins as well. The ability to audit changes in permissions so that they can be "seen" has been very helpful as well.

It can be a bit too quick to alert but this is configurable. The initial configuration will set the tone for the application and goes a long way toward the initial implementation and usage so plan your install and determine what you want it to do for you before you actually install it.

Netwrix Auditor can be setup to audit most all of the systems that a company is running. It also allows, for one price to audit most of the systems that need to be audited. In addition you can audit systems that are not part of Netwrix by using the Integration API.

The primary con with Netwrix is that the documentation is not complete. It does show how to configure a basic system but then stops there. It should also show how to configure more complex configurations. This then requires you to submit a ticket which might take a bit to get a proper answer.

It's very easy to configure most of what you'll want to log directly out of the box. The parts that are a little more confusing are easily done with talking to support. This is overall a great product and one that I've needed for years.

When you don't work with the setups on a regular basis it's sometimes time consuming to go back and make changes or add/delete things. Since it basically runs itself I haven't touched the setup in months.

Real time notification of any changes in AD and successful and unsuccessful logins to machines, which tells administrators of unauthorized login tries and legitimate user problems even before users approach administrator

There has to be exception reporting options which lets administrator know as some thing is not right for example I particular user is not supposed to be logging into a particular server and if such action happens then administrator should be alarmed - such relationship database should be there

It just works. Set it up once, and the daily/weekly jobs run without any further effort. We have our reports sent to our ticketing system, making the daily review a breeze.

Reporting filters can be a little confusing to use at times, and customization options are limited, requiring editing config files rather than within the GUI.

The version 9 client is awesome. It provides a much easier way to drill into reports and events than ever before.

The activity summary reports that it completed with errors, yet neither we nor tech support has ever been able to identify the problem. Since there are no events missing, we have just let it go.