"

Netwrix Auditor Licensing FAQs

Last review: Jun 06, 2018
https://kb.netwrix.com/274
Copy Article URL Copied

What is Netwrix Auditor licensing model?

By default, most of Netwrix Auditor applications are licensed perpetually. Exceptions are Netwrix Auditor for Office 365 and Netwrix Auditor for Azure AD – they are licensed based on subscription, in order to match the subscription-based licensing of Azure AD itself and Microsoft Office 365 products.

What license counts are used in Netwrix Auditor licenses?

Netwrix Auditor is licensed per Enabled Active Directory user account, except for three platforms: Oracle database, Office 365 (they are explained later in this article), and Network Devices.

What numbers should I provide to get a license for Oracle Database auditing?

For that, you should provide the number of CPU cores utilized by your Oracle Database deployment. This count is used to estimate the number of licenses required to audit the Oracle Database data source.
To obtain the number of CPU cores utilized by your Oracle Database deployment, follow the instructions provided in this Netwrix Knowledge Base article: https://kb.netwrix.com/717

What numbers should I provide to get a license for Microsoft Office 365 auditing (Exchange Online and/or SharePoint Online)?

For that, you should provide the number of Exchange Online user mailboxes. This count is used to estimate the number of licenses required to audit Exchange Online and SharePoint Online data sources. A user mailbox can be a personal mailbox, an Online Archive mailbox, or both. Shared and resource mailboxes do not count.

For example, if an Exchange Online user has one personal mailbox and one Online Archive mailbox, this user will be counted as a single licensed object. If a user has no Online Archive mailbox but three personal mailboxes, this will be counted as three licensed objects.

To obtain the number of user mailboxes utilized by your Microsoft Office 365 tenants, follow the instructions provided in this Netwrix Knowledge Base article: https://kb.netwrix.com/581

What numbers should I provide to get a license for Network Devices auditing?

For that, you should provide the number of source IP addresses of your network devices. This count is used to estimate the number of licenses required to audit the Network Devices data source. Note that you should count all physical devices regardless of your forwarding configuration.

To count your network devices, follow the instructions provided in this Netwrix Knowledge Base article: http://kb.netwrix.com/579

What numbers should I provide to get a license for auditing any other data source, for example, Azure AD, File Server, Group Policy, on-premises Exchange or SharePoint?

For that, you should provide the number of Enabled AD user accounts, that is, calculate the number of your Active Directory user accounts in the Enabled state.
This count is used to estimate the number of licenses required to audit the following data sources and areas (listed as they appear in Netwrix Auditor console):

  • Active Directory (including Group Policy, Inactive Users, Logon Activity, Password Expiration)
  • Azure AD
  • Exchange
  • File Servers
  • SharePoint
  • SQL Server
  • VMware
  • Windows Servers (including Event Log and User Activity)

IMPORTANT NOTE:

  1. Service accounts are also counted.
  2. Deleted, disabled, group or computer accounts are not included in the license count.

The Enabled AD user accounts count is also used for licenses required to audit file storage systems (NetApp Filer, EMC VNX/VNXe/Celerra, EMC Isilon).

To obtain the number of enabled AD user accounts, follow the instructions provided in this Netwrix Knowledge Base article: https://kb.netwrix.com/684. Then round up the calculation result to reserve some space for growth and to prevent scalability issues. For example:

  • If the calculation script returned the value of 214, round up this value to 220 when applying for the license.
  • If the calculation script returned the value of 1841, round up this value to 2000 when applying for the license.

Are service accounts counted in the total number of enabled AD users?

Yes, the accounts under which the services run in your infrastructure are included in the license count and, eventually, in the cost of a license.

How is Netwrix Auditor Data Discovery and Classification Edition licensed?

Netwrix Auditor Data Discovery and Classification Edition is licensed per Enabled AD user account.
NOTE: To view the number of used licenses, you can use the Licenses window, as described below. License count is displayed in the cell that corresponds to the baseline data source, that is, Active Directory.

How can I obtain a license?

To obtain a proper license for your infrastructure, you should provide the corresponding counts to Netwrix. Then you will receive the license key to address your auditing needs, based on the numbers you provided.
For evaluation purposes, you can use a free trial version of Netwrix Auditor that has a bundled trial license.

To learn how to add or update the license using the UI, see https://helpcenter.netwrix.com/Settings/Licenses.html

What is displayed in the Licenses window of the product UI?

You can use the Licenses window to review the status of your current licenses, update them and add new licenses.
In Netwrix Auditor main screen, click the Settings tile and then select Licenses. The window will look like shown below.

User-added image

Here:

  • The Total count field shows how many licensed objects (enabled AD users, CPU cores, or mailboxes) are included in your current license. This number is displayed for each licensed data source. If you are running a trial version, this field will show “Unlimited” for all data sources.
  • The Used licenses field shows the number of the licensed objects counted at the moment.

NOTE: Number of used licenses is displayed only in the cells that correspond to the baseline data sources: Active Directory (and Azure AD), Exchange Online and Oracle.

I’m auditing SQL servers only, and the Licenses window shows that license was exceeded expired not only for the SQL Server but also for Active Directory and others. Why?

When Netwrix Auditor is running, the number of enabled AD user accounts (license count that applies to the corresponding data sources) is refreshed by the Netwrix Auditor component responsible for AD data collection. If this count is exceeded, your SQL Server audit gets out of compliance with the existing license. Moreover, you have no opportunity to start auditing any other data source that depends on this count (e.g. VMware or Windows Server).

How do I remove license information for an unused application?

You may choose to no longer audit a data source, and thus not renew the license for the corresponding application. Unused licenses do not need to be removed from Netwrix Auditor, with the exception to one special case. This case is upgrading a Netwrix Auditor installation that has some expired licenses. To learn more, refer to this Netwrix Knowledge Base article: https://kb.netwrix.com/1089.

 

Original KB Article 2113

Go Up