Download as PDF, PPTX
![Market Validation
• Leader: Forrester PIM Wave, Q3 2016
− Top-ranked Current Offering (product) among all 10
vendors reviewed
− “BeyondTrust excels with its privileged session
management capabilities.”
− “BeyondTrust […] provides the machine learning and
predictive behavior analytics capabilities.”
• Leadership
− Gartner: “BeyondTrust is a representative vendor for all
five key PAM solution categories.”
− OVUM: “BeyondTrust […] provides an integrated, one-
stop approach to PAM… one of only a small band of
PAM providers offering end-to-end coverage.”
− SC Magazine: “Recommended product.”
− … and more from IDC, KuppingerCole, TechNavio, 451Research,
Frost & Sullivan and Forrester](https://image.slidesharecdn.com/10-161005205952/75/Defense-in-Depth-Implementing-a-Layered-Privileged-Password-Security-Strategy-21-2048.jpg)
![Market Validation
• Leader: Forrester PIM Wave, Q3 2016
− Top-ranked Current Offering (product) among all 10
vendors reviewed
− “BeyondTrust excels with its privileged session
management capabilities.”
− “BeyondTrust […] provides the machine learning and
predictive behavior analytics capabilities.”
• Leadership
− Gartner: “BeyondTrust is a representative vendor for all
five key PAM solution categories.”
− OVUM: “BeyondTrust […] provides an integrated, one-
stop approach to PAM… one of only a small band of
PAM providers offering end-to-end coverage.”
− SC Magazine: “Recommended product.”
− … and more from IDC, KuppingerCole, TechNavio, 451Research,
Frost & Sullivan and Forrester](https://crownmelresort.com/image.slidesharecdn.com/10-161005205952/75/Defense-in-Depth-Implementing-a-Layered-Privileged-Password-Security-Strategy-21-2048.jpg)
Uploaded byBeyondTrust
Defense in Depth: Implementing a Layered Privileged Password Security Strategy
The document discusses the concept of 'defense in depth' in the context of privileged password security, emphasizing the importance of layered security strategies tailored to the specific risks and types of privileged accounts. It introduces PowerBroker password management solutions that automate the management of passwords and session activities, enhancing security through adaptive workflow controls and real-time monitoring. The document also highlights market validation for BeyondTrust's privileged access management solutions, showcasing its leadership in the industry based on various independent evaluations.
More Related Content
Similar to Defense in Depth: Implementing a Layered Privileged Password Security Strategy
Defense in Depth: Implementing a Layered Privileged Password Security Strategy
- 1. Defense in Depth: Implementinga Layered Privileged Password Security Strategy Nick Cavalancia Techvangelism
- 2. You already believein layers • A visitor to your building • Access to a file • Remote Connectivity
- 3. What are youdoing today? • Password vault? • Spreadsheet? • Accountability? How are you protecting privileged passwords?
- 4. Layering security overpriv. passwords ******
- 5. Do you needall those layers? • In short, no. • Privileged accounts aren’t all alike • Layered strategy can’t be either
- 6. Consider the passwordrisk • Resource access? • External threat damage? • Internal threat damage?
- 7. Establishing defense indepth • Layers are a part of IT security • Think layered password protection • Determine the layer/password mix • Identifying password risk
- 8. PowerBroker Password Safe v6.0 MartinCannard – Product Manager
- 9. PAM – Acollection of best practices AD BridgeAD Bridge Privilege Delegation Privilege Delegation Session Management Session Management Use AD credentials to access Unix/Linux hosts Once the user is logged on, manage what they can do Managed list of resources the user is authorized to access. Gateway proxy capability. Audit of all session activity Password & SSH Key Management Password & SSH Key Management Automate the management of functional account passwords and SSH keys
- 10. Comprehensive Security Management ►Secure and automate the process for managing privileged account passwords and keys ► Control how people, services, applications and scripts access managed credentials ► Auto-logon users onto RDP, SSH sessions and apps, without revealing the password ► Record all user and administrator activity (with keystrokes) in a comprehensive audit trail ► Alert in real-time as passwords, and keys are released, and session activity is started ► Monitor session activity in real-time, and immediately lock/terminate suspicious activity Privileged Password Management People Services A2A Privileged Session Management SSH Key Management
- 11. Native desktop tool(MSTSC/PuTTY etc.) connects to Password Safe which proxies connection through to requested resource Protected Resources User authenticates to Password Safe and requests session to protected resource RDP/SSH session is proxied through the Password Safe appliance HTTPS RDP / SSH RDP / SSH Password Safe ProxyProxyProxyProxy Privileged Session Management
- 12.
- 13. Adaptive Workflow Control •Day • Date • Time • Who • What • Where
- 14.
- 15. Automatic Login toESXi example Browser RDP Client ESX RDP (4489) RDP (3389) User selects vSphere application and credentials vSphere RemoteApp Credential Checkout Credential Management User Store Session Recording / Logging HTTPS
- 16. Automatic Login toUnix/Linux Applications Typical Use Cases • Jump host in DMZ • Menu-driven Apps • Backup Scripts • Role-based Apps Browser RDP Client SSH (22) SSH (22) User selects SSH application and credentials SSH Application Credential Checkout Session Recording / Logging HTTPS
- 17.
- 18.
- 19.
- 20. What makes PasswordSafe different? • Adaptive workflow control to evaluate and intelligently route based on the who, what, where, and when of the request • Full network scanning capabilities with built-in auto-onboard capabilities • Integrated data warehouse and analytics capability • Smart Rules for building permission sets dynamically according to data pulled back from scans • Session management / live monitoring at NO ADDITIONAL COST • Clean, uncluttered, and intuitive HTML5 interface for end users
- 21. Market Validation • Leader:Forrester PIM Wave, Q3 2016 − Top-ranked Current Offering (product) among all 10 vendors reviewed − “BeyondTrust excels with its privileged session management capabilities.” − “BeyondTrust […] provides the machine learning and predictive behavior analytics capabilities.” • Leadership − Gartner: “BeyondTrust is a representative vendor for all five key PAM solution categories.” − OVUM: “BeyondTrust […] provides an integrated, one- stop approach to PAM… one of only a small band of PAM providers offering end-to-end coverage.” − SC Magazine: “Recommended product.” − … and more from IDC, KuppingerCole, TechNavio, 451Research, Frost & Sullivan and Forrester
- 22.
- 23.
- 24. Q&A Thank you forattending!