Fortra's Tripwire Enterprise Reviews

My use case for Tripwire Enterprise is configuration monitoring and regulatory purposes for the NERC CIP standards. That's about fifty percent GRC and fifty percent security around the NERC CIP standards.

What's most valuable in Tripwire Enterprise is the ability to execute custom COCR rules that lets me fine-tune how I monitor Linux and Windows agents.

Our primary use case for the Tripwire Enterprise solution is for vulnerability assessment.

It has improved our organization because we are now able to do vulnerability assessments for our customers.

I primarily use the solution for many use cases. 

We've delivered many clients' compliance solutions. It's helped with suggesting compliance, including HIPAA, ISO, et cetera. It suggested what we need to do at the device level, whether endpoint or network.

It also helps manage and monitor changes, including unauthorized changes. 

We use Tripwire Enterprise for monitoring configurations on your devices.

The most valuable feature is integrity management. I had some discussions with service providers, and they also agreed.

We use the solution for compliance purposes.

File monitoring is the most valuable feature of the solution.

The primary use case of this solution is for:

• Check File Integrity
• Check Databases Configuration Integrity, Network devices
  
• Monitor changes manually or in real time
• Validate legitimate changes
• Reverse unauthorized changes
• Test node compliance against standards( ISO 27001, PCI DSS, SWIFT...)
• Automatic and manual remediation
• Generate reports manually or automatically
• Send notification emails
• Send logs via Syslog protocol

The most valuable feature is the integrity. 

If the file configuration has been modified, this solution calculates a hash code of the file. This means that if someone has changed the file, the solution will recalculate the hash and the admin receive a notice that the file has been modified, by sending an email or an alert to the administrator that someone has modified, added or deleted a line.

Not just files, but others like tables metadata, network device config...

The solution is used for hardening and tracking changes. It can be used for file integrity monitoring and secure configuration management. Tripwire is a traditional SCM solution.

The product supports different platforms.

Banks have different compliance requirements, such as CIFs or NEFT, and they want to monitor everything at the OS, application, server, and virtualization level. They want to detect who has made the change, when did they make the change, and what is the root cause of those changes. We can monitor all this along with root causes with the Tripwire Premium solution. We are monitoring different files, folders, registries, applications, and servers. We are also implementing GuardianOS.

Its reporting features are great. It gives you an in-depth report. Its customization is also great, and it is working fine.