Access Rights Management. Only much Smarter.

Transcription

1 Access Rights Management. Only much Smarter. 8MATES OVERVIEW

2 Access Rights Management 8MAN is the leading Access Rights Management solution in Microsoft and virtual server environments and helps protect your company from unauthorised data access. Our solution sets new standards for professional network security and agile IT organisation, by coupling a modern, user-friendly interface with complex compliance related functionality. 8MAN core functionality includes: Permission Analysis Documentation & Reporting Security Monitoring Role & Process Optimisation User Provisioning. 8MATEs Overview: SECURITY MONITORING 8MATE AD Logga ROLE & PROCESS OPTIMISATION 8MATE GrantMA 8MATE Alerts 8MATE FS Logga INTEGRATION 8MATE for Exchange PROGRAMMING INTERFACES 8MATE Web API 8MATE for vsphere 8MATE for SharePoint

3 SECURITY MONITORING Our 8MAN AD Logga protects you from harmful loss of data, caused by unauthorised and often arbitrary access rights. The new 8MATE Alerts enhances this functionality by proactively alerting and informing administrators of critical security related incidents. The FS Logga module tracks all file related activity, thereby providing 360 protection from data loss and unauthorised access. The Problem Even well intentioned changes to Active Directory structures, without comprehensive monitoring, can expose your organisation to a number of serious security risks such as: Unauthorised employees can easily gain access to sensitive data through temporary group memberships, which can be extremely difficult to detect. Processes regarding the assignment of group memberships or password resets are often poorly defined and misunderstood. Without the proper tools to analyse and document these processes, it becomes nearly impossible to rectify this situation. Understand access rights in your Active Directory: 8MATE AD Logga gives you a complete history of all AD changes in your environment, including all changes made with AD native tools. Even temporary access rights and undocumented rights assignments are easily identified and understood. All changes to Accounts, Objects, Groups and attributes are documented in 100% revision-proof reports. Active Directory changes happen on a daily basis and can frequently lead to critical security issues. Two of the most important aspects are user accounts and AD group memberships. One of the primary risks of individual user accounts is the assignment of temporary passwords by authorised users who pose an insider threat, which allows these users access to sensitive data. 8MATE Alerts uses the monitoring technology of AD Logga to trigger incident related alerts. If anyone makes, or attempts to make, changes to sensitive accounts or groups, real time alerts are sent to designated users. Gaining access to sensitive data through newly granted group memberships can also severely impact any organisation. Proactively monitoring security relevant groups becomes imperative. File server environments are highly dynamic, with employees constantly adding, moving, deleting and changing files. This is usually done without any sort of comprehensive monitoring, which leads to severe security risks such as: Unauthorised employees often gain access to restricted files through temporary group memberships. Once these access rights expire, it becomes nearly impossible to track these changes and detect unauthorised access. Tracking actual access of sensitive information is the only way to be completely sure that your data has not been compromised. 8MATE FS Logga extends visibility to include all actual file accesses as well as change history. Even permissions changes made at the file and folder level directly on the file server are tracked. Security relevant incidents such as temporary access rights and changes to monitored directories are logged and tracked, thereby ensuring that these incidents no longer go undetected. The process for granting access rights is usually not transparent or properly documented. In order to prevent future data loss and implement proactive, process related measures, one needs to be able to understand why data breaches occurred in the past.

4 ROLE & PROCESS OPTIMISATION Security Officers and Administrators are usually not aware of all sensitive data locations and who should have access to individual documents. Role & Process Optimisation delegates this task to data owners and managers. 8MATE GrantMa further simplifies this process. Our fully configurable workflow gives employees the ability to request access rights and automatically delegates decisions to the appropriate data owners. As a result, your Administrators have more time to focus on other, more complex security related tasks. The Problem Administrators spend a lot of their time granting and managing access rights. Traditionally, access decisions and the technical implementation of access rights need to be handled separately. It is far more efficient to combine the decision making process with the actual assignment of rights and permissions. 8MATE GrantMa sets up workflows between employees and managers, guaranteeing that all relevant actors are included in the process. This means that Administrators do not know who should have access to which resources, thereby focusing only on the technical aspects of rights assignment. Employees request access rights via a web portal. Data Owners decide who has access to which resources within their department. 8MATE GrantMa workflow has the following advantages: Decisions on access rights are made by managers who understand the locations and sensitivity of data in their department. All changes are fully documented in the 8MAN Logbook. Administrators save valuable time allowing them to focus on other, more technical tasks.

5 PROGRAMMING INTERFACES As part of our initiative to add additional value to our technology partnerships we have developed our 8MATE Web API. This interface extends powerful 8MAN functionality into other applications. The Situation The ability to integrate and automate software solutions with one another ensures efficient information flows across departments and roles. Information is no longer siloed within teams and can be effectively shared throughout your organisation. Our 8MATE Web API allows you to enhance information gathering and reporting by connecting 8MAN with other applications. Pulling reports on access rights, users, or change logs into other systems ensures a homogenous and efficient infrastructure. Triggering processes from other applications and pushing those into 8MAN, while ensuring that everything is fully logged and documented, further cements the consistent application of critical security principles.

6 INTEGRATION 8MATES are part of our vision to continuously add new features to our 8MAN solution. Core to this philosophy is to ensure modular architecture driven by specific business cases, while maintaining one intuitive GUI across all functionalities. In addition to our standard Active Directory and file server technology, 8MAN can be connected to MS Exchange, SharePoint and vsphere systems. The Problem Managing access to MS Exchange can be very complex. MS native tools do not provide complete and holistic views of access rights to mailboxes, calendars or public folders. Therefore, Administrative actions are often extremely cumbersome. 8MATE for Exchange extends 8MAN security to your server allowing full reporting and administration of access rights. This way you can ensure that all access rights to Exchange are managed properly and remain in harmony with access rights to other resources, all within our tried and proven 8MAN GUI. The Administration of MS Exchange is closely coupled with employee onboarding processes. By adding Exchange functionality we ensure that all rights to mailboxes and folders can be made with 8MAN and fully documented, providing you with a fully revision-proof and best practice software solution. In addition to Analysis and Administration of MS Exchange, 8MATE for Exchange includes the following additional features: - Create out of office notifications without requiring access to the account. - List deputies and interim roles for mailboxes and send as permissions. - Track all changes to mailboxes, groups and attributes. Administrators see the big picture and processes can be easily optimised. Auditors know all relevant facts about security breaches and who was involved allowing. them to take action Company board members and executives can be sure that best practice processes are in place and compliance is ensured through revision-proof reports and documentation.

7 The Problem Managing and analysing SharePoint access rights can be extremely complex. Microsoft native tools don t provide any views on access rights of individual SharePoint resources. Making changes to those rights is also extremely challenging. Trying to figure out who made which changes and why is downright impossible. 8MATE for SharePoint fully integrates all SharePoint resources into one coherent view, allowing you to manage access rights in harmony with other resources and applications. 8MAN s easy to read reports and intuitive interface ensures that you can see and modify access rights quickly and accurately. 8MAN displays all access rights in a tree structure, allowing you to see which users have access to which resources at a glance. Our unique Scan Comparison feature shows you which access rights have been changed within a given period of time and ensures that you remain fully aware of all changes made within your environment. 8MATE SharePoint includes full reporting and administration of all SharePoint access rights. Our Group Wizard allows you to configure standard naming conventions and rights assignment processes. The Problem In order to get an overview of all vsphere access rights with native tools, Administrators need to check each vsphere resource separately. As with other resources the vast complexity of access rights makes this a daunting task. vsphere access rights can be vast and allow for widespread modifications. For example, copying an entire virtual machine can be achieved with only a few clicks, via the Create Snapshot function. This means that potential security breaches can have far reaching effects, ultimately threatening your entire IT infrastructure. 8MATE for vsphere scans all access rights and even shows you which groups grant access to specific vsphere resources. This feature allows you to easily detect and remove unnecessary and redundant permissions. It also includes recommendations for standard best practice processes and allows you to create and configure the proper permissions profile for every user.

8 8MAN Protected Networks GmbH Distribution by: T: E: W: