Centrify Suite Enterprise Edition Online Training

Transcription

1 CENTRIFY DATASHEET Centrify Suite Enterprise Edition Online Training Overview The process of installing, configuring, and troubleshooting the Centrify software is easy, once you understand the fundamentals. This training will aid your staff in becoming proficient at these tasks, leading to a successful Centrify project. This technical training will lead your team through an example deployment using lecture, videos, and training guides; delivered online. Pricing and Ordering Contact your Centrify Sales Representative to order, or us at training@centrify.com. Training Course Details Items Details Course Type Technical Product Training Duration 18+ hours (estimate) Who should attend? UNIX, Windows, Security and/or System Administrators who need to deploy and administer the Centrify Suite Enterprise Edition in their environment Prerequisites Student must have a basic understanding of UNIX, Active Directory, and SQL Server Format Lecture, video demonstrations, and example lab guides (lab environment is NOT included) Course Logistics Produce final documentation; perform hand off of the deployment plan, and final status meeting with the customer management team CENTRIFY CORPORATION. ALL RIGHTS RESERVED. DSH000126EN

2 Standard Edition Training Course Materials Introduction to Centrify An overview of Centrify, our products, and dedication to customer satisfaction. 1 Background Product line Customer focus Active Directory and Centrify Software Preparation for the Centrify deployment requires planning. We will start with a baseline for all teams to understand how the software works, and what elements will make you successful. 2 Following best practices Creating organizational units Overview of the Centrify Software Deployment Manager There are many ways to deploy the Centrify software but, during training, the Deployment Manager is the fastest method. This sets a foundation for working with *NIX machines in a Windows environment. 3 Finding *NIX machines Downloading Centrify agents Analyzing *NIX machines Zone Design Creating a hierarchical zone structure is crucial to a successful deployment. Understanding the reasons for zones, and how to work with hierarchical inheritance will allow you to design an easy to maintain environment. 4 Hierarchical user profiles Global and Child zones Delegation of control Pre-Create Computers Being able to visualize your environment before deployment is valuable to ensure access is granted properly. This is one of the first steps to ensuring accuracy is maintained. 5 Prepare UNIX Computers Join computers to zones Preview structure Managing NIX Users Traditionally, UID management has been difficult and disparate. We will navigate you through the steps necessary to maintain current UID space, while also preparing for cleanup and simple maintenance. 6 User profiles Levels of profile over-rides Importing users from current machines 2015 CENTRIFY CORPORATION. ALL RIGHTS RESERVED. DSH000126EN

3 7 Basic Roles and Rights The heart of proper management ensures least privilege is adhered to in your organization. We will discuss the fundamentals for roles, rights, and access in this module. Levels of access Assigning rights Assigning roles 8 Deploying the Software Using Deployment Manager, the software can be pushed to many *NIX machines at one time. After deployment, we will verify users have appropriate access and learn about the tools Centrify provides. Using Deployment Manager to push *NIX software Testing access and roles Access joined systems with Single Sign-On and KERBEROS 9 Zone Provisioning Agent A difficult and time consuming task is the maintenance of UIDs. Using the Centrify ZPA can reduce or eliminate this process. Configuring the ZPA service Understanding source groups Review automated and semi-automated capabilities 10 Roles and Rights with DZDO In keeping with least privilege, this module will focus on advanced capabilities of Centrify roles. We will also learn about the centralization of management for elevated permissions. Benefits of DZDO Centralizing permissions Verifying rights 11 Using Computer Roles Managing single machines can be tedious. Computer roles will allow management, privileges, and rights to be applied to groups of machines. Defining a computer role Creating AD groups for granting rights Rapid deployment and expansion 12 Migrating Sudoers Rather than creating roles and rights individually, Centrify provides an import wizard for this process. Identifying sudoers data Importing user and computer roles Cleaning old data 13 Active Directory Group Policy Applying a wide range of security policies has never been easier. AD Group Policies will allow for rapid deployment of these policies. Explanation of Group Policy Identifying policies for application Verify policy compliance 2015 CENTRIFY CORPORATION. ALL RIGHTS RESERVED. DSH000126EN

4 14 ADEDIT For those preferring scripts and terminal interface, Centrify provides a command line interface using SDKs running on *NIX machines. Using the CLI Creating adedit queries Review script sample 15 DZ for Windows Centrify is not limited to *NIX machines. The concepts we covered in this course apply to Windows machines as well. Installing the DZ4WIN agent Creating roles, rights, and elevated desktops Granting permissions based on match criteria Enterprise Edition Training Course Materials 1 Introduction to Direct Audit This module introduces the architecture of DirectAudit, and provides an overview of the major components. Planning for a successful deployment and installing and configuring the required components Integrating the Enterprise Suite with existing organizational procedures 2 Installation and Planning Guidelines This module describes how to size your DirectAudit installation and determine where to install the auditing infrastructure. Choosing how many DirectAudit database installations to deploy Estimating the sizes for the Audit Stores and deciding how many Collectors to deploy Audit Manager Configuration This module describes how to install the DirectAudit user interface and database(s) in your Windows and SQL Server environments. 3 4 Installing the Enterprise Administrator Console Creating a new Enterprise Installation Creating an Audit Store Collectors and Agents This module covers the installation of the DirectAudit infrastructure including the collectors and agents. Installing the Collector Installing the Agents on Windows, UNIX and Linux Computers Auditing Unleashed This module focuses on the usage and review of auditing sessions and auditor roles. 5 Creating additional auditor roles Reviewing and managing Audit sessions Creating and sharing queries among auditors 2015 CENTRIFY CORPORATION. ALL RIGHTS RESERVED. DSH000126EN

5 6 Using DZ Check This module covers product enhancements and additional features that can be customized for your organizational needs. Using change control tickets Scripting enhanced features About Centrify Centrify strengthens enterprise security by managing and securing user identities from cyber threats. As organizations expand IT resources and teams beyond their premises, identity is becoming the new security perimeter. With our platform of integrated software and cloud-based services, Centrify uniquely secures and unifies identity for both privileged and end users across today s hybrid IT world of cloud, mobile and data center. The result is stronger security and compliance, improved business agility and enhanced user productivity through single sign-on. Over 5000 customers, including half of the Fortune 50 and over 80 federal agencies, leverage Centrify to secure their identity management. Learn more at Santa Clara, California: +1 (669) sales@centrify.com EMEA: +44 (0) Web: Asia Pacific: Brazil: Latin America: CENTRIFY CORPORATION. ALL RIGHTS RESERVED. DSH000126EN