ActiveDirSec.Org

The world's most trusted forum on Active Directory Security


Post Info TOPIC: Has anyone here tried Audit for AD from Netvision?


Member

Posts: 17
Date: Jul 15, 2011
Has anyone here tried Audit for AD from Netvision?
Permalink  
 


Hello Forum,

We've been looking for a tool to audit delegations in our Active Directory and happened to come across a tool called Audit for AD by a company called NetVision.

They claim to show be able to show us you Who has Access to What, but it seems like they're only showing where all a user/group might have permissions in Active Directory, which is something we can already do with other tools.

What we're looking for is a way to find out Who has Access to What based on a determination of Effective Permissions in Active Directory, i.e. not where all a user has permissions, but rather what access that user has actually has.

They also claim to be a finalist of some Info Security Products Guide 2010. Since there are many magazines that companies can virtually buy an endorsement in, I'm wondering how much this really means, only because I've never heard of it.

If anyone has any experience with this product, or knows of a product that can help us audit delegated access in our Active Directory, please feel free to share.

Thanks,

Will.



__________________

I’m sorry, but having a DB9 on the drive and not driving it is a bit like having Keira Knightley in your bed and sleeping on the couch.



Newbie

Posts: 3
Date: Jun 27, 2012
RE: Has anyone here tried Audit for AD from Netvision?
Permalink  
 


Will,

I have not personally used it, but a few of my colleagues have. Suffice it to say they didn't the best things to say about it.

I have seen their website, and I'm always wary of any security vendors that resort to cheap marketing tricks like - Explore our current special offer and contact us today.

Er, thanks, but no thanks, because I'm not exactly buying a truck here, if you know what I mean, but in fact I'm looking to buy a serious, trustworthy security solution that I can bank my business's auditing infrastrucutre on.

Anyway, just thought I'd share what I've heard. Their solution may very well be good enough for you, but that's for you to independently determine, because standards are always subjective.

Good luck with your search.

Jesse.



__________________


Member

Posts: 21
Date: Jun 29, 2012
RE: Has anyone here tried Audit for AD from Netvision?
Permalink  
 


Hi Will,

This seems like yet another case of a misleading marketing.

There are so many vendors that claim to help you find out "who has access to what" when in fact they're only helping us get a better look at Active Directory ACLs which we can already do with tools like dsacls.

When I think of finding out "who has access to what" I'm thinking of finding out "who really has access to what" which is actually answering the question "who has effective access to what." 

That's the question I want an answer to, and from what it sounds, Audit for AD is either showing you ACLs or is an auditing solution, meaning they might be showing "who did what", not "who can do what."

Ishmael.



__________________

There isn't a system that cannot be broken into.

Page 1 of 1  sorted by
Quick Reply

Please log in to post quick replies.

Post to Digg Post to Del.icio.us
Members Login
Username 
 
Password 
    Remember Me