File System Auditor - Frequently Asked Questions
What is File System Auditor?
As the name implies, File System Auditor is a unique auditing solution that monitors the use of files and folders on a file system in real-time and centrally stores a record of each occurrence in a central database.
I use native windows auditing of the file system already.
Why do I need File System Auditor?
Native auditing of the file system cannot provide you with a simplified centralized view of file system events enterprise-wide along with reporting and email notifications.
See the comparison matrixfor more detail.
Will I see tens or hundreds of entries with File System Auditor like I do with native auditing?
No. File System Auditor uses Intelligent Auditing technology to make sense of file system events to yield a single entry in the auditing database.
How much bandwidth does FSA use?
That depends on how much file activity occurs on your file server! The first time a file is accessed, FSA will store an average of around 100 bytes of data in the database. For future accesses FSA will typically store 10-20 bytes. The total amount of data sent by FSA�s collection agent will increase with the number of users that access the server and the number of unique files they use. The only way to find out is to download the free evaluation version and try it for yourself!
How CPU load will the FSA agent require on my file server?
Most of our customers have found that the FSA agent uses 1% or less of their available CPU resources. For underpowered file servers, or where the FSA agent has a backlog of events to store (e.g. after a lost connection to the SQL Server) then it might temporarily spike higher � typically to not more than 20% for a few seconds.
Is File System Auditor another "snapshot" based auditing solution?
No. File System Auditor monitors file system activity in real-time to ensure each and every event that occurs is recorded for a truly auditable trail. Snapshot-based auditing solutions can only show you the sum of all the changes since the last snapshot and not each individual event that occurred.
Does File System Auditor help with meeting compliance standards?
YES. File System Auditor applies to all regulatory and best practice standards that require protecting sensitive information (such as patient, financial or customer data). See the Compliance Matrix to see where File System Auditor assist in compliance.
How does File System Auditor work?
File System Auditor is implemented as a file system driver, ensuring it does not miss any file system events. When files and/or folders are accessed for any reason (read, rename, delete, etc), File System Auditor�s driver is a part of the process, allowing it to monitor and record all actions taken upon a file system.
What are the system requirements?
File System Auditor requires Windows Server� 2000 SP4 with Update Rollup 1, or Windows Server� 2003 with SP1.
File System Auditor™ Licensing
How is File System Auditor licensed?
File System Auditor is licensed by the number of servers where you will capture file events.
It doesn't matter how many CPUs or NICs a server has – one server computer requires one license. For active-active clustered servers, each node in the cluster requires one license. For active-passive clusters only one license is required. For DFS, one license is required for every server computer being audited, even if all files are visible through one root share.
For SAN systems, it is only the number of servers that is counted – not the number of storage nodes or disk arrays, except in the case of active-passive clusters where only active servers are counted.
Do I need a license for every server on my network?
No. You only need a license for every server on which you will audit file activity. This is a "named server" license – each license is assigned to a server when you manage permissions on it.
What license quantities are available?
Licenses are available in any quantity.
Can I move licenses from one server to another?
Each license becomes permanently assigned to a server the first time that once you start auditing file activity on that server.
What happens if I exceed my license count?
If you gather file events from more servers than you have licenses for then the Reporting Console will not let you run reports against the database. Please contact your reseller or ScriptLogic representative to purchase more licenses.
Is an evaluation license available? What restrictions does it have?
Yes, a 30-day evaluation license is available. The evaluation license will only permit you to gather file events from 2 servers.
Can I extend my evaluation?
You can request an extension for an evaluation license, send email to sales@dbl.co.uk
How do I find how many licenses I have installed?
In the Server Configuration Utility or the Reporting Console, under the "Help" menu click "About" to show the number of licenses you have purchased.
How do I find out how many licenses I've used?
In the Reporting Console, click on the "Servers" filter tab and the number of servers listed is the number of licenses you have used.
How do I install the Reporting Console and Server components on multiple computers?
Every time you install File System Auditor on a computer you must re-apply the original license file supplied to you by ScriptLogic.
Is there a limit to the number of workstations on which I can run the File System Auditor
Reporting Console?
No
General Licensing Information
How are licenses delivered?
Once your order has been processed you will receive your license code or file by e-mail.
How can I add more licenses?
The process is the same for all products, contact sales@dbl.co.uk to purchase more licenses. When your order has been processed you will be provided with a new electronic license for the total quantity of licenses you purchased.
Do you offer any types of discounts?
Discounts are available for customers buying larger quantities of each product, contact sales@dbl.co.uk
What about shrink-wrap product?
ScriptLogic does not sell any of its products with shrink-wrap packaging. All delivery of software and licenses is electronic.
Enhanced discounts available for Government and State Healthcare, Charities and Education, please contact sales@dbl.co.uk | 
