When you click on an event, eNTrax characterizes it as critical, concerned or cautious, indicating the level of importance eNTrax attaches to the event. The software suggests ways to tighten security. As with the security assessment module, we found the suggestions to be fundamental at best. The best feature of eNTrax is its reporting capability. There are 12 canned reports that can be modified, generated and exported to a number of different formats, including HTML, Crystal Report Writer and Microsoft Excel.
Installation is easy.
After we installed the software on the console server, we created a target diskette to install the agent software on the NT servers and the NT workstations we wanted to monitor. The installation of the agent on another NT 4.0 server and NT 4.0 workstation was equally easy. Once we rebooted the second server it was recognized by our console server. We found that eNTrax is a useful tool for pointing out failed logons, irregular logons and attempted access to files and folders to which users don't have rights. But because eNTrax relies solely on NT log files, it cannot detect outside attacks.