The integration of Access Appliance with Data Insight has the following functionalities:

• You can monitor NFS share activities and get details such as who uses the data, who owns the data and who has access to the data.

• You can gather audit information on operations such as create, delete, read, write, make directories, remove directories, and rename type.

• You have full visibility into data access, which helps drive security remediation, and auditing and compliance efforts using the web-based graphical user interface (GUI).

• You can automate the movement of stale, less accessed, and other unimportant data to cloud or cheaper storage alternative with the help of the DI reporting and Access Appliance policy engine.

• You can have a cluster-level view of audit logs. Access Appliance has multiple nodes, so you can access the same share or even the same file from multiple nodes in the cluster. You can merge the audit logs from different nodes to give a unified view to DI.

• You can monitor data for any potential security breaches or internal misuse of information. You can ensure that proper document protocols are followed consistently, and you can also prevent and track down fraud.

• You can enhance your risk-management capabilities by running reports on a given end user and examine their activity. You can see which records have been accessed, edited, added, or deleted. You can also get details on deleted records like when it was deleted, who deleted it, and so on. You can track what goes on in the database.

Access Appliance helps the DI administrator to:

• Add Access Appliance in the DI GUI.

• Enable and disable auditing on a given NFS share.

• Mount and scan the share as and when required.

• Fetch the audit logs periodically from Access Appliance.

• Allow showing the audit statistics on the DI console.

• An NFS server should be running on all the nodes.

• xprtld (Access Appliance UI REST server) should be running on all the nodes.

• sfsdg disk group should be present

• You can add Access Appliance as one of the file system servers.

• You can administer Access Appliance from the DI GUI and perform the following functions:

  • Scan the Access Appliance share from DI. For NFS scanning, the mount and scan approach is used.

  • Enable and disable audit logs for the share.

  • List file systems on which auditing is enabled.

  You can get the information (path, permissions, and other details) about the shares. The Veritas File System Information Management Infrastructure (IMI) is used for collecting audit logs. The audit logs are created for each node and merged to give a cluster view.

• DI can collect the audit logs periodically. xprtld (Access Appliance UI REST server) is used for transferring the logs. The audit logs of Access Appliance are shared with DI using the pull model.

• Only NFS shares scanning is supported for this release.

• In case of a node restart, monitoring of shares does not work for that node.