Netwrix Auditor - Video Recording
-
Hi folks,
What do you think about using Netwrix Auditor Video Recording? We use Netwrix on our servers already and collect logging on user actions and changes, but we have not enabled session recording. Do you think that is overkill?
I have done some testing, and it feels valuable to be able to click on a session and actually see what the sysadmin did on the server. My use case is to monitor backup servers and file server with video recording. All other servers can go without, but those two types of servers hold very privileged information, and I think having a recording of what is done on the system would be useful.
May be overkill though, and I know a lot of syadmins will not be happy about having their sessions recorded. But again, only being done on the servers holding the privileged data.
What do you think? Video or no video?
Best,
Jim -
Seems like you've already answered your question and just want someone to agree.
I don't see any issue and you can add an motd on login to remind that the systems are recorded. They're company systems, not personal.
-
@Jimmy9008 said in Netwrix Auditor - Video Recording:
What do you think? Video or no video?
What happens when someone connects without video? Like PowerShell remoting or whatever?
-
I'd opt for "no GUI on servers" first
-
I would do it, it never hurts. Hey it might be positive and negative. Someone can learn how great a job someone did or how poorly a job was done. The point is to make sure it is documented.
