Ultra vs Lite

Ultra and Lite are both powerful, but they are different.

Both Ultra and Lite can:

Ultra

Lite

Monitor: File activities (reads, writes, creates, deletes, moves, renames)

Ultra

Lite

Alert: Real-time alerts via email, write to a log file, write to Event Log, play sound, call a URL, send Syslogs or SNMP Traps, etc.

Ultra

Lite

Information: Accessed file, user account, user IP address*, file operation, date and time

Ultra

Lite

* User IP address is available if the user is on Windows Vista or newer. Older versions of Windows did not support sending the IP address.

Only Ultra can:

Ultra

Lite

Database: Write file, user account, user IP address, file operation, date and time to an embedded SQLite or Microsoft SQL Server database.

Ultra

Lite

Reports: Generate reports over a period of time using the above database (Lite users would need to write to a text log file and then manually search the log file)

Ultra

Lite

Supports Endpoints: Supports File Sight Endpoints, including file copy detection, application whitelisting and preventing access to cloud drives and/or USB/external drives.

Ultra

Lite

Advanced Alerting: Alert on advanced usage patterns (like someone reading 15 files within 1 minute -- probably a file copy operation or a ransomware attack)

Ultra

Lite

Central Management: Manage multiple PA File Sight installations from a single central console

Ultra

Lite

Block External Drives: Has the Drive Sight monitor which can prevent external drives (USB, etc) from attaching to a server

Ultra

Lite

For more detail about the differences, see the Feature Overview.