Features
- Collects Windows NT/2000 event logs in real time.
- Alerts you by email to all important events happening on your network - no need to access the event log of each machine individually.
- Archives security events, depending on their importance, in 4 different event logs: Critical, high security, medium security and low security events. This way you can clearly recognize a pattern.
- Can consolidate the security events of all your network machines in one central event log.
- Alerts can be configured based on security level.
- GFI LANguard S.E.L.M. has extensive reporting on security events happening in your network. All reports can be customized in Crystal reports.
- A partial list of events that GFI LANguard S.E.L.M. monitors:
- logon failures occurring in your network
- accounts getting locked out
- expired user accounts
- user accounts being created
- successful logon of an administrator outside office hours
- account password changes
- global group members being added
- local group members being added
- detects when a hard disk is full which disables security event logs - possible denial of service to disable audit logging
- new trusted domain
- user account changed
- audit log cleared
|