WebAlarm is a data integrity monitoring and recovery solution with the following key features:
WebAlarm continuously monitors files and folders round the clock to detect any changes made to the monitored data. WebAlarm scans each file to check for its existence, integrity and access permissions.
WebAlarm will detect the following violation:
A monitored file or folder has been deleted
A new file or folder has been added to a monitored folder
The content of a monitored file has been altered
The access permissions of a monitored file or folder has been altered
WebAlarm will issue alerts upon detection of any data integrity violation. The types of alerts include:
WebAlarm Console alerts
Network management console alerts, via SNMP
Email alerts
WebAlarm will automatically take immediate action upon detection of a data integrity violation event. This is a built-in feature of WebAlarm without requiring any additional scripting by the administrator.
The available options for automatic recovery include:
Automatic full recovery of file content from backup
Automatic recovery by replacement with a standard template file
Automatic launching of third party or custom programs (such as any proprietary recovery program, anti-virus, etc)
WebAlarm provides full audit logging on all the data violation and update events within its scope of monitored data. The information provided in the log includes:
Date and time of event
Type of event
Full pathname of violated file
In addition, WebAlarm also provides quarantine of modified file content for forensic inspection or analysis.
WebAlarm allows continuous monitoring without interruption while some part of the data is being updated. WebAlarm provides two flexible methods for content owners to update the monitored data without trigger any false alarm.
The WebAlarm Console can be used to set WebAlarm to “update mode” for a specified time period so that WebAlarm will learn any new changes within this allowed time period. The “update mode” can be triggered on-demand as and when required, or it can be scheduled.
In deployment environments where staging servers or content management systems exist, the update method using WebAlarm’s “Update Management Agent” (UMA) is preferred. The UMA resides on the staging server, and will detect any new authorized changes on the staging server and will deliver the updates securely to the WebAlarm Agent in the live server. The live server will only accept authenticated updates from the UMA, without having any risk of time window exposure.
