File Integrity Monitoring

PCI DSS Ready File Integrity Monitoring – Fast, Easy and Comprehensive
Pre-defined Templates for folders that should & need to be checked
Manual option to add files and folders to be checked
Secure Hash checks ensures absolutely all changes are detected
In built reporting to immediately alert you to ‘unauthorized’ changes to folders and files that may render system insecure or non compliant
Easy to use and secure dashboard to ensure your systems are compliant and remain compliant

As a mandated dimension of the PCI DSS, ‘File Integrity Monitoring’ (FIM) verifies that program and operating system files have not been compromised.

Why is this important? The principal benefit of using FIM technology is to ensure that malicious code has not been embedded within critical applications and operating system files. The insertion of a ‘backdoor’ or Trojan into core program files is one of the more audacious and elegant forms of hacking, and also one of the most dangerous.

For more information - Click Here

The PCI DSS (Payment Card Industry Data Security Standard) specifies the following “Deploy file-integrity monitoring software to alert personnel to unauthorized modification of critical system files, configuration files, or content files; and configure the software to perform critical file comparisons at least weekly” and also that for log files “Use file-integrity monitoring or change-detection software on logs to ensure that existing log data cannot be changed without generating alerts (although new data being added should not cause an alert)”.

NNT Change Tracker™ ensures you are 100% compliant with this aspect of the PCI DSS – we provide pre-defined templates for all folders and files that should be tracked for File-Integrity, also allowing you to specify additional program folders and files unique to your environment, for instance, your core business applications.

NNT Change Tracker™ conducts an initial inventory of all filesystems specified and ‘fingerprints’ all files using secure hashing technology, generating a unique checksum for each file. The system will then audit all files being tracked on a scheduled basis every 24 hours (even though the PCI DSS calls only for weekly checks) with any changes, additions, deletions or modifications being reported to you.

Change Tracker™ can also operate in a ‘live tracking’ mode for ultra-secure environments where file changes are detected and reported in real-time.

Other options available are to track and identify actual changes to file contents, useful when tracking configuration files to provide you with a complete audit trail of change history – this can be applied to any form of files such as text, xml, javascript js, asp and asp.net aspx files for websites.

NO WONDER SECURE COMPUTING MAGAZINE RECENTLY AWARDED NNT CHANGE TRACKER THEIR HIGHEST AWARD OF 5 STARS FOR ‘FEATURES, EASE OF USE, PERFORMANCE AND VALUE FOR THE MONEY’.

View Log Tracker Demo - Click here

NNT V5 Video Demo - Click here

"Change Tracker from New Net Technologies was quite simply the best, most comprehensive, easiest to use and affordable solution we looked at!"
Steve Broadhead – Broadband Test Laboratories & Computer Weekly blogger