IPAM Auditor Appliance by Cygna Labs Corp provides a robust, scalable auditing repository for tracking and reporting on DDI transaction history. IPAM audit events are sent from the IPControl Executive to the Sapphire A30 for storage and reporting. DHCP and DNS packet data, along with key incidents like DNS tunnel detection or DNS firewall events from Sapphire appliances, enable transaction auditing, forensics analysis, and trending reporting. A rich graphical interface with easy-to-navigate dashboards provides summaries of transactions with drill downs to the packet level for maximum forensics capability. It centralizes all DDI transactions and serves as a repository for IPAM, DHCP, DNS, and Sapphire appliance events and alerts. IPControl transaction auditing logs IPAM transactions, including containers, blocks, IP addresses, resource records, appliances, DHCP option sets, and domains. BIND DNS events can be audited via IPAM Auditor. When used with Sapphire DNS appliances, DNS query and response data can be reported to the IPAM auditor, along with DNS events such as tunnel detection and DNS firewall triggers. DHCP log events from Sapphire appliances can be sent to the IPAM Auditor for reporting, in addition to DHCP packet transactions for forensics analysis and fingerprinting. Sapphire appliance vitals can be viewed and audited via the IPAM Auditor, including CPU, memory, and disk utilization, as well as input/output statistics in real time and historically. Customizable reports enable administrators to tailor reports and filter on data of interest. Reports can be viewed in the Auditor user interface or extracted via the Auditor’s REST API.
