Enterprise Security Reporter

Enterprise Security Reporter is targeted to security and/or compliance administrators in Windows shops, providing for them the ability to discover and report the current state of permission and access settings within their Windows network. Among the metrics that can be discovered and reported are domain and local users, goups, memberships, folders and file permissions, Active Directory attributes, last logon, file shares and printers (with permissions), etc.

The product leverages an agent-less architecture to discover information from Windows, Active Directory, SharePoint, and soon SQL Servers. A Discovery Console provides the main control point for this discovery process; itself housing an SQL Server (2000+) or MSDE DB and allowing the administrator to specify which servers to examine (discovery groups containing sets of servers of domains can also be defined) and which attributes to collect and store in the DB.

From there the Reporting Console provides access to this data; including over 160 pre-defined reports (over 20 of which are specifically tuned for SharePoint servers). Reports can be scheduled and delivered via E-mail; and support is provided for the outputting of reports in multiple formats, including PDF, CSV, RTF, TXT, TIF, and HTML. "Delta" comparisons are also supported (where two discovery snapshots can be compared) and report definitions can be imported and exported.

For customization, the vendor offers the Report Customization Wizard, which allows for the customization of existing reports; the new Ad-Hoc Query Builder, a four-step wizard that allows non-technical users to build SQL queries against the data store and see the results in a pivot table style grid (can be exported to Excel); and the Report Builder, which enables the design of custom reports from scratch. For each of those tools, the vendor notes that no SQL knowledge is necessary. The vendor also notes that custom SQL queries as well as 3rd party reporting tools (supporting an SQL DB) can be executed against the data store.

The Discovery and Reporting Consoles both require Windows 2000/XP/2003 machines; however the platform supports the actual discovery of Windows NT/2000/XP/2003 Server operating systems, NT domains, Windows 2000 and 2003 Active Directory, and SharePoint Server 2007.

Forthcoming from the vendor is a version of Enterprise Security Server targeted for use with SQL Server (currently in beta, expected to be available by the end of April). The vendor notes that it will allow for the discovery and documentation of database object and schema security, server logins, database users and user group membership.

The now available product is branded by the vendor as both "Enterprise Security Reporter" and "Enterprise Security Reporter for SharePoint." Pricing is $619 per discovered server; with volume discounts available on purchases of 25 servers or more.

Visit the ScriptLogic Web site for further information.

product submission by EITPlanet Staff

Latest category updates via our RSS feed