Monitoring module

The Performance Monitoring module extends the inventory functionality of AuditPro.

Along with regular auditing, this facilitates real-time computer monitoring:

• Processor - total processor usage (percentage)
• Memory - total RAM memory usage (percentage)
• Harddisk - total fixed drive space available (MB)
• Network - total network cards traffic (downloads/uploads)
• Printers - print jobs
• USB files - file operations on USB keys/disks
• Users - user logins to computers
• WTS/RDP - terminal server login sessions
• Mouse - total number of clicks
• Keyboard - total number of hits
• CD/DVD ROM - number of media inserts
• WWW browser - WWW browser (e.g. Internet Explorer or Mozilla Firefox) titles and URLs
• Programs - launched applications and foreground applications
  • Terminate forbidden - automatically terminate processes that are defined as forbidden
  • Monitor only tracked programs - when monitoring programs include only applications listed in “Tracked” list
  • Forbidden applications (a list of forbidden applications and their termination)
• Alerts - automatic email alerts for several parameters (CPU usage, memory usage)

Data transfer - the method how to transfer data from clients to the server for importing to the database

• Output folder - the client will save output file to the specified destination folder
• Send by email - automatically send output files to specified email address (performed by AuditPro client) using SMTP protocol or MAPI
• FTP upload - automatically upload output files from client to specified FTP folder
• HTTP upload - automatically upload outputfiles from client to specified HTTP address (HTTP POST port 80)
• Transfer over TCP/IP - automatically import output files from client to SCN folder (performed by AuditServer using TCP/IP remote control)

Items:

• Delete ignored files data - delete promptly current database content which match the ignored files definitions
• Delete PC Monitor files older than ... days - automatically delete monitoring data stored in the database
• Do not add users from MON files - when importing MON files do not add new users, only work with existing users in the database
• Week hours settings - limit forbidden applications (enable/disable) based on week-hours scheme
• Working hours - working hours settings for monitoring reports

Installing and running monitoring on workstations:

• To monitor computers it is necessary to have Client AuditPro (SCAN.EXE) running permanently on monitored computers.
• The principles of client installations are identical as those for scanning (except it is recommended to install the client as an NT service).
• Settings are saved (during configuration) and read (SCAN.EXE) from the SCAN.INI file (same as for scanning).
• A file named [PC_name][date].MON is created every day on every computer.
• The .MON files from the Program Files\AuditPro\SCN\ are inserted into the database