Product Documentation

SmartAuditor

May 05, 2015

SmartAuditor allows you to record the on-screen activity of any user’s session, over any type of connection, from any server running XenApp. SmartAuditor records, catalogs, and archives sessions for retrieval and playback.

SmartAuditor uses flexible policies to trigger recordings of XenApp sessions automatically. This enables IT to monitor and examine user activity of applications — such as financial operations and healthcare patient information systems — demonstrating internal control, thus ensuring regulatory compliance and successful security audits. Similarly, SmartAuditor also aids in technical support by speeding problem identification and time-to-resolution.

Benefits

Enhanced auditing for regulatory compliance. SmartAuditor allows organizations to record on-screen user activity for applications that deal with sensitive information. This is especially critical in regulated industries such as health care and finance, where compliance with personal information security rules is paramount. Trading applications and patient information systems are two prime examples.

Powerful activity monitoring. SmartAuditor captures and archives screen updates, including mouse activity and the visible output of keystrokes in secured video recordings to provide a record of activity for specific users, applications, and servers. Organizations that use SmartAuditor have a better chance of proving criminal intent, where it exists, by using video evidence combined with traditional text-based eDiscovery tools.

Faster problem resolution. When users call with a problem that is hard to reproduce, help desk support staff can enable recording of user sessions. When the issue recurs, SmartAuditor provides a time-stamped visual record of the error, which can then be used for faster troubleshooting.

Example Usage Scenarios

Monitoring acceptable use of resources. Ray, the IT Manager in a local firm, needs to know whether employees are following the acceptable use policies and other business controls he instituted to regulate access to resources published using XenApp. Until now he had no way of measuring acceptable usage and had to trust that users of mission-critical applications were not misusing their privileges. He now uses SmartAuditor to record user sessions and has his surveillance officer review recorded sessions to establish cases of misuse.

Monitoring specific users or groups. John, a surveillance officer at a stockbroking firm, needs to monitor a group of stockbrokers to observe particularly sensitive, high-value transactions. He uses SmartAuditor to record sessions for this group of stockbrokers.

Investigating suspected violations. Lisa is John’s colleague at the stockbroking firm. She is a compliance officer who is tasked to investigate suspected compliance violations. She uses SmartAuditor to record all XenApp sessions for a particular employee.

Monitoring access scenarios. Marcus, the IT Manager at an insurance company, needs to monitor access to specific applications. He uses SmartAuditor to record all sessions that involve use of a particular published application.

Technical support and troubleshooting applications.Victor, a Support Engineer at a leading software vendor based in the United States, is often called on to resolve application issues at remote customer sites in Asia. He uses SmartAuditor to record user sessions and reviews recorded sessions to understand the sequence of events that led the application to fail. His colleagues in the development team are also able to deploy new versions of applications for usability testing at focus groups. User sessions are recorded and the team can understand usability issues that exist during a review of recorded sessions.

Training applications. Jim is a professor in the Computer Science department of a large university. He uses SmartAuditor to record students accessing a collaborative development environment. Based on their interactions with the environment, he can identify the areas in which they need to improve and can provide appropriate feedback.