FileSystemAccess Data Collector

The FileSystemAccess (FSAA) Data Collector collects permissions, content, and activity, and sensitive data information for Windows and NAS file systems. The FSAA Data Collector comes preconfigured within the File System Solution. Both this data collector and the solution are available with a special Access Analyzer license. See the File System Solution topic for additional information.

Protocols

• Remote Registry
• WMI

Ports

• Ports vary based on the Scan Mode Option selected. See the File System Scan Options topic for additional information.

Permissions

• Permissions vary based on the Scan Mode Option selected. See the File System Supported Platforms topic for additional information.

Sensitive Data Discovery Considerations

If running Sensitive Data Discovery (SDD) scans, you must increase the minimum amount of RAM. Each thread requires a minimum of 2 additional GB of RAM per host. By default, SDD scans run two concurrent threads. For example, if a job scans 8 hosts at a time with two concurrent SDD threads, it requires an extra 32 GB of RAM (8x2x2=32).

FSAA Query Configuration

Configure the FSAA Data Collector through the File System Access Auditor Data Collector Wizard. The wizard contains the following pages, which change based up on the query category selected:

• FSAA: Query Selection
• FSAA: Applet Settings
• FSAA: Scan Server Selection
• FSAA: Scan Settings
• FSAA: Azure Tenant Mapping
• FSAA: Activity Settings
• FSAA: Default Scoping Options
• FSAA: Scoping Options
• FSAA: Scoping Queries
• FSAA: Sensitive Data Settings
• FSAA: SDD Criteria Settings
• FSAA: Bulk Import Settings
• FSAA: FSAA Update Service Setting