Mantra is a non-intrusive monitoring appliance that monitors and reports on all critical and regulated data, in real-time, based on policies that you create or pre-defined policy templates for Sarbanes Oxley (SOX), the Payment Card Industry Standard (PCI) and data theft protection.

Reporting

Mantra provides a broad range of reports including summary, pre-defined and custom reports. Mantra’s custom report builder tool enables you to quickly and easily create the specific reports you need.

The reporting system is designed to answer questions like:

• Where is my critical data located?
• Where are specific types of data such as Social Security Numbers (SSNs), credit card numbers or other privacy related data?
• What are privileged users doing today, what were they doing last week, last month?
• Which SOX or PCI policies are being triggered right now? Which policies were triggered earlier today?
• Which applications or tools are accessing which databases?
• This week, which databases have been targets of unusual activity?
• This month, what client-side users and IP addresses are accessing my data servers?
• Between 7:00 pm on Monday and 9:00 am on Tuesday, what data did user Bob Smith access?
• What alerts were generated last night?

There are a number of pre-defined reports included with Mantra. They include reports such as:

• Data discovery
• Privileged user activity
• Failed logins
• Application usage activity
• Database change control
• Client IP usage
• Server IP usage
• Long-lived sessions
• Stored procedures
• DDL by user
• DML by user
• Failed commands by users
• Privilege escalations

To create custom reports, simply chose a report template or style and define the type of data that you want to view and Mantra does the rest. You can also define reporting schedules—hourly, daily, weekly or monthly.

Mantra can generate reports in a variety of formats, including HTML and PDF, or export the data in XML. Mantra stores all data from audit and alert policies in a secure, tamper-proof database on the appliance. From the Tizor Management Center, you can view detailed summary reports for each appliance, and create custom event reports that drill into the details of each event for forensic analysis and reporting.

Report Distribution and Workflow

Mantra reports can be automatically distributed for review and approval using the Mantra workflow system. During the report design stage, workflow enables you to assign review and approval roles to users. You can assign multiple reviewers and approvers for each report.

Once the report is created, it is automatically distributed to the assigned reviewers and approvers via email—greatly simplifying the management of compliance reporting. PDF versions of the reports or a URL link to the report(s) can be embedded in the emails. In both cases the users are linked back to the Mantra Report Management Center where, after the user is authenticated, they can approve/sign the reports listed on their to-do list. Once all approvers have signed the report, it is stored and archived.