How can SolarWinds monitor user activity and prevent unauthorized access?

1 Configure audit settings

The first step is to configure the audit settings in SolarWinds, which allow you to track and record the actions performed by users and administrators on the network. You can enable auditing for various events, such as login attempts, configuration changes, alerts, reports, and node management. You can also specify the level of detail and the retention period for the audit logs. To access the audit settings, go to Settings > All Settings > Auditing Settings.

2 Review audit reports

The second step is to review the audit reports generated by SolarWinds, which provide you with a comprehensive overview of the user activity and the network status. You can view the audit reports in the web console, or export them to CSV or PDF formats. You can filter the reports by date, event type, user name, IP address, and action. You can also create custom reports based on your specific needs and preferences. To access the audit reports, go to Reports > All Reports > Audit Reports.

3 Set up alerts and notifications

The third step is to set up alerts and notifications in SolarWinds, which allow you to receive timely and relevant information about the network events and the user activity. You can create alerts based on various criteria, such as severity, frequency, duration, and threshold. You can also customize the alert actions, such as sending emails, SMS, or SNMP traps, executing scripts, logging tickets, or triggering remediation tasks. To access the alert settings, go to Settings > All Settings > Manage Alerts.

4 Use role-based access control

The fourth step is to use role-based access control in SolarWinds, which allow you to limit and restrict the access and permissions of different users and groups on the network. You can assign roles to users and groups based on their job functions and responsibilities, and define what they can view, edit, create, delete, or execute on the network. You can also enforce password policies, authentication methods, and session timeouts. To access the role settings, go to Settings > All Settings > User Accounts.

5 Monitor network traffic and performance

The fifth step is to monitor the network traffic and performance in SolarWinds, which allow you to detect and diagnose any anomalies, bottlenecks, or issues on the network. You can use various tools and features, such as NetFlow Traffic Analyzer, Network Performance Monitor, Network Configuration Manager, and Network Insight, to collect and analyze the network data and metrics. You can also create dashboards, charts, graphs, and maps to visualize and understand the network behavior and trends. To access the network monitoring tools, go to Settings > All Settings > NPM Settings.

6 Implement security best practices

The sixth and final step is to implement security best practices in SolarWinds, which allow you to protect and secure your network monitoring tool and your network environment. This includes regularly updating SolarWinds to fix any vulnerabilities or bugs, using encryption and SSL certificates to secure communication and data, applying firewall rules and antivirus software to prevent malware and intrusions, following the principle of least privilege and the principle of separation of duties, and educating users and administrators on the security policies and procedures. By adhering to these steps, SolarWinds can be used to monitor user activity, prevent unauthorized access, improve network security, and boost performance.