DATASHEET (TRIPWIRE)

Tripwire Enterprise 9.0

Superior Security, Continuous Compliance
Security, compliance, and IT operations leaders need a powerful and effective
way to accurately identify security misconfigurations and indicators ofcompromise. Fortra’s Tripwire® Enterprise is the leading compliance monitoring
solution, using file integrity monitoring (FIM) and security configuration
management (SCM). Backed by decades of experience, it’s capable of advanced
use cases unmatched by other solutions.
This fully integrated suite of solutions for policy compliance, system integrity, andremediation management reaches far beyond simple compliance. It enables
teams to rapidly achieve an increased level of security across the entire enterprise,including on-premises, cloud, and industrial assets.  

How It Works: Powerful, Integrated Controls  

Tripwire Enterprise delivers four core capabilities in a single interface that work inconcert as an enterprise-class security and compliance solution:
System Integrity Management scans across large heterogeneous environments
to detect threats and provides an instant view into configuration vulnerabilities—
boosting ecosystem security by reducing configuration drift and unauthorizedchange. Tripwire File Integrity Manager is the world’s first and best FIM solution andit can also be used stand-alone for granular endpoint intelligence. When used with
Tripwire Policy Manager, it delivers change-triggered configuration assessmentand other system-configurable responses. This turns a “passive” configurationassessment into a dynamic, continuous, and real-time defensive solution, delivering
customized contextual information to accelerate effective response.  
Policy Management establishes and maintains continuous agent and agentlessconfiguration assessment against 4,000+ combinations of platforms, security andcompliance policies, standards, regulations, and vendor guidelines. Tripwire Policy
Manager offers complete policy customization, waiver and exception management,
automated remediation options, and prioritized policy scoring. It does all this whileproviding auditors with easily accessible evidence of compliance, making policy
status highly visible and actionable for compliance teams.  

Advanced Use Cases are available thanks to the highly customizable monitoring
options, real-time change detection for your most critical assets, enterprise-wide
detection of emerging vulnerable files (Log4J, Spring4Shell, Text4Shell, etc.), and continual review of networking devices to meet strict hardening standards. Tripwire Enterpriseis unmatched in advanced monitoring use cases, fortifying your security ecosystem.

Key Benefits• Powerful integrity monitoringand security configuration
management workflow• Unparalleled visibility into
misconfigurations andsuspicious changes  • Compliance monitoring
backed by decades ofexperience• Threat prioritization withguidance on returning asystem to a secure andcompliant state• Monitoring for adherence toregulatory policy requirements (PCI, NIST, CIS, anddozens more), with deliveryof auditor-friendly reporting

Key Integrations• Tripwire LogCenter®
• Splunk• ServiceNow• Active Directory• SAML 2.0• Cherwell• Remedy• JIRA• Thycotic• ChangeGear• CyberArk

Fortra Datasheet

Tripwire Enterprise 9.0

Remediation Management works alongside Tripwire Policy Manager to supply built-in guidance to IT security and complianceteams to repair drifted, misaligned security configurations while retaining role-based management, approvals, and signoffs forrepairs. This helps operations teams quickly understand what failed and how to return systems into a production-ready state—
and once they’re in production, keep them there.
Investigation and Root Cause Drill-down gives IT security and operations teams the ability to quickly and efficiently determine
what happened. Systems inevitably change as enterprises constantly revise and change their people, processes, and technologies. Tripwire Enterprise delivers granular drill-down, and side-by-side historic baselines and comparisons to quickly provide
investigative teams what they need to know: what changed, when, by whom and how often, along with “how” information,
giving unparalleled visibility into the forensic details of changes to the environment.

Industry-leading Security and Compliance Capabilities  Tripwire continuously adds new capabilities to meet evolving security and compliance challenges. Tripwire Enterprise now has
capabilities to protect industrial devices, and, using the MITRE ATT&CK framework, discover evidence of adversarial behavior inyour environment.

Reporting and Integration  Between the included audit-ready reporting, our advanced security use cases, and our integrations to leading platforms suchas ServiceNow and Splunk, Tripwire Enterprise enables you to efficiently connect security details with business context: Always
know your current security posture (and how it’s trending) to achieve corporate objectives for risk reduction. Get visibility into
the security and risk trends across your enterprise—from the entire organization down to business units or single departments.  

MITRE ATT&CK Framework  

Developed by the MITRE corporation, the ATT&CK framework is a cybersecurity model illustrating how adversaries behave anddetails the tactics you should use to improve security. Using ATT&CK policy content for Tripwire Enterprise, you can detect andreport on adversarial behavior in your environment—adding a new layer of defense to your security strategy. And this is only
one of dozens of frameworks available in our comprehensive content library.

Node detail screen showing policy results for this node.

Fortra Datasheet

Tripwire Enterprise 9.0

Key Features and Benefits

Support for Hybrid Environments» Monitors both on-premises and cloud environments for security and compliance» Reduces costs and gives better visibility via a single solution for both environments  
Updated Data Collection and Communication» Enables best-in-class security, integrity monitoring, and configuration and compliance management with Tripwire Axon®, apluggable, extensible endpoint data collection and communication platform

Auto Onboarding/Offboarding for Cloud Assets» Classifies and scans assets as soon as they are connected in dynamic environments  
» Delivers immediate baseline state to monitor changes through the life of an asset even when short-lived» Provides automatic offboarding that lets you define how long ephemeral assets data should be retainedSingle Point of Control for All IT Configurations» Supports centralized control of configurations across the entire physical and virtual IT infrastructure, including servers anddevices, applications, and multiple platforms and operating systems

Advanced Integration Through REST APIs

» Enables programmatic automation of Tripwire Enterprise, extraction of collected information, and custom integrations withother solutions» Allows automation of routine tasks through administration APIs, to integrate Tripwire Enterprise workflows with other businessprocesses and tools.

Robust Asset Views» Supports classification of assets with business-relevant tags, such as risk, priority, geographic location, regulatory policies,and more

» Offers provisioning with an asset tag file, increased scale for large numbers of assets, and imported asset tagging fromintegrations with other Tripwire products

Workflow Tools for Managing Failed Configurations» Delivers the Remediation Manager module for role-based workflows that let users approve, deny, defer, or execute manualand automated remediation of insecure and non-compliant configurations

Integration with Change Management Systems» Integrates with leading change management system (CMS) solutions such as ServiceNow, Remedy, Cherwell, JIRA and more» Automatically reconciles detected changes against change tickets and change requests
Support for Maintaining a Secure, Compliant State» Automates compliance with industry regulations and standards such as PCI DSS, SOX, FISMA, DISA, NERC, and many others» Combines security configuration assessment with real-time FIM to detect, analyze, and report on changes as they happen to keep
configurations continually compliant and fix issues before they result in a major data breach, audit finding, or long-term outage

Faster, Easier Audit Preparation» Dramatically reduces the time and effort for audit preparation by providing continuous, comprehensive IT infrastructurebaselines, along with real-time change detection and built-in intelligence to determine the impact of change» Includes reports designed with auditors in mind to ensure you can confidently supply justifications
Active Directory and SAML Integrations» Integrations between Tripwire Enterprise and Active Directory or your preferred IDP reduces administrative overhead andminimizes human error with auto-created users, groups, and roles for secure and efficient access management

Fortra DatasheetTripwireBroad Support for your IT Stack  Keep watch over mission-critical servers or the entire IT infrastructure, including cloud and virtualized environments, applications, and industrial devices. Tripwire Enterprise provides the capability to assess, validate, and enforce policies while detecting
all changes—no matter their source. It supports out of the box agent and agentless monitoring for:Physical, Virtual, Cloud and Hybrid Environments: Works in both physical and virtualized environments including private,public, and hybrid clouds. The Tripwire Enterprise console can operate as a virtual machine and its agents can monitor anysupported virtualized or physical endpoint.  
File Systems and Desktops: Assesses configurations of physical and virtual server and desktop file systems, including security
settings, configuration parameters, and permissions with forensic-level insight.
Directory Services: Includes independent compliance policy management for LDAP-compliant directory server objects andattributes such as LDAP schema, password settings, user permissions, network resources, group updates, and security policies.
Network Devices: Assesses configuration settings of the broadest range of network devices in the industry, including any
device running a POSIX-compliant operating system. With custom connection parameters, most devices can be monitored.  
Databases: Keeps Oracle, Microsoft, and IBM database servers and instances in a secure, continually high-performing state.
VMware: Provides visibility across the VMware virtual infrastructure, enabling continuous configuration control of virtualenvironments.
Applications: Compliance policy management and integrity monitoring capabilities ensure supported applications are configured properly for security, compliance, functionality, and availability.
Customizable and Flexible Device Support: Tripwire maintains a content library with over 4,000 out-of-the-box configurations.
The customizable monitoring capabilities of the zero-configuration Tripwire Axon® agent empowers Tripwire Enterprise to workwith most devices supporting common protocols, or even APIs. This gives you the flexibility to monitor assets that are critical toyour operation—even when those assets are in-house or custom solutions not widely available in the market.

SYSTEMS MONITORED
Major OSes: Windows, Red Hat, Oracle,
AIX, SUSE, Debian, Ubuntu, Solaris,CentOS, Rocky, HP-UX
Directory Services: Active Directory,LDAP
Network Devices: Firewall, IPS and IDS,routers, SSH devices
Databases: Oracle, MS SQL, DB2 andPostgreSQL
Virtual Infrastructure: VMware
Tripwire Enterprise’s customizable dashboard showing Security and Change compliance.

Ready To Dig Deeper?

To learn more about Tripwire Enterprise capabilities, reports, available policies, and platform support, visit tripwire.com.

About Fortra
Fortra is a cybersecurity company like no other. We’re creating a simpler, stronger future for ourcustomers. Our trusted experts and portfolio of integrated, scalable solutions bring balance andFortra.com

control to organizations around the world. We’re the positive changemakers and your relentless ally toprovide peace of mind through every step of your cybersecurity journey. Learn more at fortra.com.

© Fortra, LLC and its group of companies. All trademarks and registered trademarks are the property of their respective owners.

fta-tw-ds-1122-r1-hm