Skip to main content

Exchange Solution

The core components for Netwrix Access Analyzer (formerly Enterprise Auditor) are the Access Analyzer Console server, SQL Server, and Access Information Center. See the Requirements topic for the core requirements.

In addition to these, integration with either the Netwrix Activity Monitor or the Netwrix Threat Prevention is required for event activity data to be scanned. See the Netwrix Activity Monitor Documentation or the Netwrix Threat Prevention Documentation for installation requirements and information on collecting activity data.

See the following topics for target environment requirements:

Exchange Solution Requirements on the Access Analyzer Console​

RAM, CPU, and Disk Space

These are dependent upon the size of the target environment:

EnvironmentExtra Large – LargeMedium – Small
Definition~50,000-120,000 Mailboxes~1,000-10,000 Mailboxes
RAM16+ GB8+ GB
Cores8 CPU4 CPU
Disk Space120 GB120 GB

NOTE: If running Sensitive Data Discovery (SDD) scans, it will be necessary to increase the minimum amount of RAM. Each thread requires a minimum of 2 additional GB of RAM per host.For example, if the job is configured to scan 8 hosts at a time , then an extra 16 GB of RAM are required (8x2=16).

Sensitive Data Discovery Auditing Requirement

NOTE: The appropriate JDK (Java) version for Sensitive Data Discovery is installed on the server. The JDK deployed is prepackaged and does not require any configuration; it has been preconfigured to work with Access Analyzer and should never be customized through Java. It will not conflict with other JDKs or Java Runtimes in the same environment.

Permissions to Run Exchange Scans

The following are additional requirements for the Access Analyzer Console server specific to running the Exchange Solution:

  • Outlook should not be installed
  • StealthAUDIT MAPI CDO installed (for MAPI- based data collectors). See the StealthAUDIT MAPI CDO Installation topic for additional information.
  • Exchange MAPI CDO installed (for MAPI- based data collectors)
  • For targeting Exchange 2010 – Exchange Management Tools 2010 installed on the Access Analyzer Console server
  • For Targeting Exchange Online – PowerShell Execution Policy set to unrestricted for both 64-bit and 32-bit versions

Exchange Online Modern Authentication

The following prerequisites are required to use Modern Authentication for Exchange Online in Access Analyzer.

  • Exchange Online Management v3.4.0

    • You can install this module with the following command:

      Install-Module -Name ExchangeOnlineManagement -RequiredVersion 3.4.0

  • Create a self-signed certificate that will be used by Access Analyzer for Modern Authentication

Exchange Solution Requirements on the SQL Server​

RAM, CPU, and Disk Space

These are dependent upon the size of the target environment.

EnvironmentExtra-LargeLargeMediumSmall
Definition~120,000 Mailboxes~50,000 Mailboxes~10,000 Mailboxes~1,000 Mailboxes
RAM64 GB16 GB16 GB8 GB
Cores16 CPU16 CPU8 CPU4 CPU
Number of Disks4444
Operating System Disk160 GB160 GB160 GB160 GB
SQL Database Disk1.25 TB650 GB415 GB325 GB
SQL Transaction Log Disk650 GB650 GB325 GB325 GB
SQL TEMP DB Disk325 GB325 GB325 GB325 GB