5

We're looking for a file integrity checker for our windows server environment. Anyone have any good suggestions?

I.T. Support
  • 601
  • 2
  • 11
  • 27
  • 1
    Windows has a built in "Windows File Protection" http://support.microsoft.com/kb/222193 Would this suffice? – I.T. Support Apr 22 '11 at 20:32
  • 2
    I don't think PCI auditors would find that to be enough. It's only going to monitor certain Windows system files - none of your application or data files. – Cocowalla Apr 25 '11 at 14:47

2 Answers2

3

Another option is Verisys. Like Tripwire it does file integrity monitoring and has a central administration console for reporting etc, but it's a whole lot easier to use than the commercial versions of Tripwire, and cheaper too :)

Cocowalla
  • 623
  • 5
  • 16
2

I've seen Tripwire highly recommended on UNIX platforms; I believe there is a Windows version as well, might be a starting point.

James Green
  • 895
  • 1
  • 9
  • 23
  • There is a windows version. – Tom O'Connor Apr 25 '11 at 15:57
  • +1 - does what it says on the tin. Perfect for assisting with PCI compliance. – mfinni Apr 25 '11 at 16:23
  • 3
    Another Tripwire/Windows customer here. Do your homework beforehand to narrowly identify what files you want to track, and how you want to be alerted. The product has so many features that you run the risk of "optional paralysis". Also the UI is a wee bit funky - you have to click on folders in odd ways that are hard to explain. It feels like a throwback to early 1990s X window managers, which just happens to be the time and place that tripwire dates from. – AndyN Apr 25 '11 at 17:08