- Microsoft Windows chief decries standards grandstanding
- The 5 best, and 5 worst, features of Google Chrome OS
- Federal government using PS3 to crack pedophile passwords
- 10G Ethernet cheat sheet
- Top 10 free Windows tools for IT pros, at a glance
We installed Tripwire 7 and have deployed the software agents to the systems we want to monitor, but are having trouble getting our baseline records established. We created nodes for each of our Windows servers and set up the Active Directory monitoring rules we want the system to use for monitoring directory service operations. For some reason the baseline operation runs very briefly and does not create a baseline record or provide any error messages to guide our troubleshooting. Any ideas?
It sounds like you are trying to apply Active Directory Rules to Windows Server Nodes.
There are multiple types of Node definitions in Tripwire and each Node type can be the target for matching types of monitoring rules. In short, Active Directory Rules can only be applied to Active Directory Nodes. Take a look at the Nodes view in the Tripwire console and determine whether the Node Type is listed as Windows Server or Directory Server. You may need to create another set of entries for the systems as Active Directory server nodes in addition to an existing set of Windows Server nodes. When you select a Node in the Nodes view and activate the Baseline action you should be presented with a dialog from which to select the Rules that will be applied to the Node for creating the Baseline. To monitor server operating system elements and Active Directory elements on the same physical system you will need Node definitions of type Windows Server for monitoring the operating system and associated Windows File System and/or Windows Registry Rules along with Active Directory Node definitions and Active Directory Rules.
Comments (7)
Solidcore works wellBy Anonymous on April 29, 2008, 6:45 pmYou might also consider looking at a tool from Solidcore (www.solidcore.com) for this. I've found it much easier to use and more effective than Tripwire, but it's...
Reply | Read entire comment
Solidcore Did Not ImpressBy dmb4pres on April 29, 2008, 10:11 pmInteresting comment - this doesn't seem to add up to our own analysis. The organization I work for did an evaluation for both Tripwire and Solidcore for PCI compliance...
Reply | Read entire comment
Solidcore vs. TripwireBy Anonymous on April 30, 2008, 11:15 amHmmm....Maybe we have different roles in our respective organizations, because it doesn't appear "you" actually did the analysis of the products. I've worked in...
Reply | Read entire comment
Real comments about Tripwire from real usersBy james murgel on April 30, 2008, 11:48 amInteresting that real users seem to find tons of value in Tripwire, but many "anonymous" users (ie: SOLIDCORE EMPLOYEES) seem to be writing in about how great their...
Reply | Read entire comment
Let Network World decideBy Anonymous on April 30, 2008, 1:38 pmListen friend...I wish I had the luxury of saying I worked for a vendor like Solidcore or Tripwire, but I'm merely an IT professional working for a company whose...
Reply | Read entire comment
Getting a baselineBy Anonymous on April 30, 2008, 5:11 pmIf you deployed the Windows agents, they should have showed up as Discovered, but it sounds like you manually added them as AD nodes. If the nodes aren't showing...
Reply | Read entire comment
View all comments