Tripwire State Analyzer enables organizations to define required or permitted system settings and generates comprehensive reports of authorized and unauthorized settings along with justification information when a system is examined. The product works with Tripwire Enterprise and Tripwire IP360 to provide automated monitoring of systems against lists of allowed configurations to ensure network security. It enables centralized policy management and generates reports on approved and unauthorized system settings of multiple types. Reports enumerate settings that are out of compliance and can be configured to provide justification for why changes were allowed, creating an automatic audit trail of changes and justifications as well as unauthorized changes as they occur. The product monitors ports and services, comparing current state against approved configurations and alerting when variances are detected. Automated report generation reduces time spent on audit preparation.