Privileged Account Management Mar3n Cannard, Security Solu3ons Architect
|
|
|
- Lewis Stone
- 8 years ago
- Views:
Transcription
1 Privileged Account Management Mar3n Cannard, Security Solu3ons Architect
2 Customer Use Cases - Introduc3on A US-based Natural Gas and Electric company serving multiple states Project Requirements Only grant access to shared administrative accounts with pre-approval based on established policy Need to provide firecall functionality Needed to delegate administrative access for Separation of Duty (SoD) Required logging of Windows administrator activity Needed to consolidate Unix identities into Active Directory to streamline provisioning, password management and privilege account management
3 Customer Use Cases - Introduc3on A global leader in payment processing Project Requirements Needed to centralize accounts and get control over passwords and user lifecycles Needed to replace NIS and provide centralized authentication Needed to restrict and audit what users could do but at the same time provide for users to carry on with their day-to-day jobs Needed to provide controls around shared administrative passwords Needed to rotate administrative account passwords regularly Needed to correlate and audit administrative activity with the actual end user
4 Helicopter View Automate the management of func3onal account passwords AD Bridge Delega3on Allow the user to use their AD creden3als to access Unix/Linux hosts Once the user is logged on, manage what they can do Session Management Managed list of resources the user is authorized to access. Audit of all session ac3vity
5 Helicopter View Automate the management of func3onal account passwords AD Bridge Delega3on Allow the user to use their AD creden3als to access Unix/Linux hosts Once the user is logged on, manage what they can do Session Management Managed list of resources the user is authorized to access. Audit of all session ac3vity
6 PAM Sub- Categories PRIVILEGES AD Bridge Use Case Utility Company Needed to consolidate Unix identities into Active Directory to streamline provisioning, password management and privilege account management PLATFORMS Opera3ng Systems Privilege Sessions Delegation Use Case - Payment Processing Needed to centralize accounts and get control over passwords and user lifecycles Needed to replace NIS and provide centralized authentication
7 Helicopter View Automate the management of func3onal account passwords AD Bridge Delega3on Allow the user to use their AD creden3als to access Unix/Linux hosts Once the user is logged on, manage what they can do Session Management Managed list of resources the user is authorized to access. Audit of all session ac3vity
8 PAM Sub- Categories PRIVILEGES AD Bridge Use Case Utility Company Only grant access to shared administrative accounts with pre-approval based on established policy Need to provide firecall functionality PLATFORMS Opera3ng Systems Network Devices Privilege Sessions Delegation Use Case - Payment Processing Needed to provide controls around shared administrative accounts Needed to rotate administrative account passwords regularly Databases Applica3ons
9 Password Management root administrator root administrator
10 Password Management password request password release password reset root
11 PAM Sub- Categories PRIVILEGES AD Bridge Privilege Sessions Delegation
12 Helicopter View Automate the management of func3onal account passwords AD Bridge Delega3on Allow the user to use their AD creden3als to access Unix/Linux hosts Once the user is logged on, manage what they can do Session Management Managed list of resources the user is authorized to access. Audit of all session ac3vity
13 PAM Sub- Categories PRIVILEGES PROTOCOLS AD Bridge Use Case Utility Company RDP VNC Required logging of Windows administrator activity SSH TELNET Privilege Sessions HTTP HTTPS Delegation
14 Privileged Session Management - Windows Request session Retrieve password RDP
15 Privileged Session Management - Unix Request Unix session Retrieve password shell
16 Privileged Session Management Network Enclaves X1 Request RDP session to X1 Privileged Session Manager Retrieve password RDP SSH Session details passed to Proxy Session goes straight back to the user Proxy SSH PCI Network Enclave
17 Helicopter View Automate the management of func3onal account passwords AD Bridge Delega3on Allow the user to use their AD creden3als to access Unix/Linux hosts Once the user is logged on, manage what they can do Session Management Managed list of resources the user is authorized to access. Audit of all session ac3vity
18 PAM Sub- Categories PRIVILEGES PLATFORMS Use Case Utility Company Opera3ng Systems AD Bridge Needed to provide find-grained delegation of administrative (root) access for Separation of Duty (Sod) Use Case - Payment Processing Privilege Sessions Delegation Needed to restrict and audit what users could but at the same time provide for users to carry on with their day-to-day jobs Needed to correlate and audit administrative activity with the actual enduser
19 PRIVILEGES Unix Delega3on: Problem Statement AD Bridge How do I allow users to perform elevated tasks on Unix without losing control of the root password? Pair a password vault with a delegation solution Privilege Sessions Delegation Common delegation solutions Native OS solutions (RBAC implementations) The open source Sudo project The Commercial Unix Security space
20 PRIVILEGES AD Bridge What did we discover? Na7ve OS op7ons Commercial 3 rd party solu7ons ~3,000 customers sudo Linux: 7.5M servers Unix: 2.8M servers Mac: 2.0M servers No focus on this segment! Privilege Sessions Delegation Result? Companies would: Purchase a PAM sol n only for their highest risk machines Hate having to re- train admins & help desk staff on a new syntax Bend sudo in crazy ways
21 Sudo v1.7 and earlier PRIVILEGES AD Bridge Privilege Sessions Delegation
22 PRIVILEGES Field Feedback: Common Pain and Trends AD Bridge How do I easily provide access control reports? How do I deal with sudoers? How to manage it, distribute it, etc How do I enable central keystroke logging? Privilege Sessions How do I know what is going on across lots of systems? Delegation How do I provide more fine-grain control in the policy?
23 Sudo v1.8 and the new plug- in API PRIVILEGES AD Bridge Privilege Sessions Delegation
24 PRIVILEGES Example architecture using plug- in API AD Bridge Privilege Sessions Delegation
25 Example pain points that the plug- in API can assist with PRIVILEGES AD Bridge Privilege Sessions Delegation Sudo Reporting Access Control Report Event Activity Commands run Policy changes Deployment Preflight and sudo plug-in installation Policy Management Editor, Versioning, Rollback Keystroke Logging Search, Playback Separation of Duty
26 SUDO v2.0: Design Phase PRIVILEGES AD Bridge Privilege Sessions (April 12, 2012) New security policy format Designed for the needs of the enterprise Include an API to support analysis and reporting tools Support grouping of commands and options in logical units Facility management of sudoers by multiple stake-holders Time based policy rules Data source plug-ins Delegation
27 SUDO v2.0: Design Phase PRIVILEGES AD Bridge Privilege Sessions Delegation
28 Complete Identity & Access Management Manage Access to Business Critical Information Access Governance Access Governance Privileged Privileged Account Management Account Management Understand & Control Administrator Activity Simplify Account Management Identity Administration User Activity Monitoring Audit User Activity Quest Software, Inc. All rights reserved..
29 Thank You
30 Centrally view sudo event ac3vity
31 Search and filter sudo event logs
32 Manage local accounts
33 Replay sudo sessions
34 Detailed Sudo access control repor3ng
35 Separa3on of Duty
Identity and Access Management Integration with PowerBroker. Providing Complete Visibility and Auditing of Identities
Identity and Access Management Integration with PowerBroker Providing Complete Visibility and Auditing of Identities Table of Contents Executive Summary... 3 Identity and Access Management... 4 BeyondTrust
Privileged Account Access Management: Why Sudo Is No Longer Enough
Access Control Excellence Privileged Account Access Management: Why Sudo Is No Longer Enough The new privileged access management solutions available on the market today provide highly efficient and effective
Securing VMware Virtual Infrastructure with Centrify's Identity and Access Management Suite
WHITE PAPER CENTRIFY CORP. MARCH 2009 Securing VMware Virtual Infrastructure with Centrify's Identity and Access Management Suite Securing and auditing administrative access to the Virtual Infrastructure
How to best protect Active Directory in your organization. Alistair Holmes. Senior Systems Consultant
How to best protect Active Directory in your organization Alistair Holmes. Senior Systems Consultant So where do we start? Lets break it down Security Management 2 Security concerns with Active Directory
Secret Server Qualys Integration Guide
Secret Server Qualys Integration Guide Table of Contents Secret Server and Qualys Cloud Platform... 2 Authenticated vs. Unauthenticated Scanning... 2 What are the Advantages?... 2 Integrating Secret Server
ObserveIT User Activity Monitoring software meets the complex compliance and security challenges related to user activity auditing.
ObserveIT User Activity Monitoring software meets the complex compliance and security challenges related to user activity auditing. ObserveIT acts like a security camera on your servers, generating audit
The 10 Pains of UNIX Security. Learn How Privileged Account Security Solutions are the Right Painkiller
Learn How Privileged Account Security Solutions are the Right Painkiller Table of Contents Introduction: Control Access, Empower Team 3 The 10 Pains of UNIX Security 4 Pain No.1: Protecting the Keys to
How To Manage A Privileged Account Management
Four Best Practices for Passing Privileged Account Audits October 2014 1 Table of Contents... 4 1. Discover All Privileged Accounts in Your Environment... 4 2. Remove Privileged Access / Implement Least
Edit system files. Delete file. ObserveIT Highlights. Change OS settings. Change password. See exactly what users are doing!
ObserveIT auditing software acts like a security camera on your servers. It provides bulletproof video evidence of user sessions, significantly shortening investigation time. Every action performed by
Trust but Verify: Best Practices for Monitoring Privileged Users
Trust but Verify: Best Practices for Monitoring Privileged Users Olaf Stullich, Product Manager (olaf.stullich@oracle.com) Arun Theebaprakasam, Development Manager Chirag Andani, Vice President, Identity
Privileged Access Control
Privileged Access Control Ramsey Hajj MS CISSP Director APAC edmz Security Ramsey.hajj@edmz.com Governmentware 2010 Booth A-13 Slide 1 Agenda What is Privileged Access? Examples of Privileged Access Common
PowerBroker for Windows Desktop and Server Use Cases February 2014
Whitepaper PowerBroker for Windows Desktop and Server Use Cases February 2014 1 Table of Contents Introduction... 4 Least-Privilege Objectives... 4 Least-Privilege Implementations... 4 Sample Regulatory
Centrify Server Suite Management Tools
SERVER SUITE TECHNICAL BRIEF Centrify Server Suite Management Tools Centrify Server Suite includes - at no extra charge - a powerful set of management tools in all editions: Centrify Identity Risk Assessor
Privileged Session Management Suite: Solution Overview
Privileged Session Management Suite: Solution Overview June 2012 z Table of Contents 1 The Challenges of Isolating, Controlling and Monitoring Privileged Sessions... 3 2 Cyber-Ark s Privileged Session
Securing Privileges in the Cloud. A Clear View of Challenges, Solutions and Business Benefits
A Clear View of Challenges, Solutions and Business Benefits Introduction Cloud environments are widely adopted because of the powerful, flexible infrastructure and efficient use of resources they provide
BEST PRACTICES FOR UNIX/LINUX PRIVILEGED IDENTITY AND ACCESS MANAGEMENT
WHITE PAPER PIM, PAM and PUM BEST PRACTICES FOR UNIX/LINUX PRIVILEGED IDENTITY AND ACCESS MANAGEMENT Fox Technologies, Inc. www.foxt.com sales@foxt.com 616.438.0840 PIM, PAM and PUM: Best Practices for
identity management in Linux and UNIX environments
Whitepaper identity management in Linux and UNIX environments EXECUTIVE SUMMARY In today s IT environments everything is growing, especially the number of users, systems, services, applications, and virtual
PowerBroker for Windows
PowerBroker for Windows Desktop and Server Use Cases February 2014 1 Table of Contents Introduction... 4 Least-Privilege Objectives... 4 Least-Privilege Implementations... 5 Sample Regulatory Requirements...
PRIVILEGED IDENTITY MANAGEMENT CASE STUDY. Barak Feldman, Cyber-Ark Software Seth Fogie, Lancaster General Health
PRIVILEGED IDENTITY MANAGEMENT CASE STUDY Barak Feldman, Cyber-Ark Software Seth Fogie, Lancaster General Health November 10, 2011 Cyber-Ark Overview! Established in 1999, HQ Boston, MA Strategic Partnerships!
Mobile Admin Architecture
Mobile Admin Architecture Introduction Mobile Admin is an enterprise-ready IT Management solution that enables system administrators to monitor and manage their corporate IT infrastructure from a mobile
What s New in Centrify Privilege Service Centrify Identity Platform 15.4
CENTRIFY PRIVILEGE SERVICE WHAT S NEW What s New in Centrify Privilege Service Centrify Identity Platform 15.4 Centrify Privilege Service Centrify Privilege Service is a cloud-based password and access
PCI DSS Compliance: The Importance of Privileged Management. Marco Zhang marco_zhang@dell.com
PCI DSS Compliance: The Importance of Privileged Management Marco Zhang marco_zhang@dell.com What is a privileged account? 2 Lots of privileged accounts Network Devices Databases Servers Mainframes Applications
Red Hat Enterprise ipa
Red Hat Enterprise ipa Introduction Red Hat Enterprise IPA enables your organization to comply with regulations, reduce risk, and become more efficient. Simply and centrally manage your Linux/Unix users
Enterprise IT is complex. Today, IT infrastructure spans the physical, the virtual and applications, and crosses public, private and hybrid clouds.
ENTERPRISE MONITORING & LIFECYCLE MANAGEMENT Unify IT Operations Enterprise IT is complex. Today, IT infrastructure spans the physical, the virtual and applications, and crosses public, private and hybrid
Quest One Identity Solution. Simplifying Identity and Access Management
Quest One Identity Solution Simplifying Identity and Access Management Identity and Access Management Challenges Operational Efficiency Security Compliance Too many identities, passwords, roles, directories,
InspecTView Highlights
InspecTView auditing software acts like a security camera on your servers. It provides bulletproof video evidence of user sessions, significantly shortening investigation time. Every action performed by
Vistara Lifecycle Management
Vistara Lifecycle Management Solution Brief Unify IT Operations Enterprise IT is complex. Today, IT infrastructure spans the physical, the virtual and applications, and crosses public, private and hybrid
ADSelfService Plus Client Software Installation Guide
ADSelfService Plus Client Software Installation Guide ( I n s t a l l a t io n t h r o u g h A DS e l f S e r v ic e P l u s w e b p o r t a l a n d M a n u a l I n s t a l l a t io n ) 1 Table of Contents
Privileged. Account Management. Accounts Discovery, Password Protection & Management. Overview. Privileged. Accounts Discovery
Overview Password Manager Pro offers a complete solution to control, manage, monitor and audit the entire life-cycle of privileged access. In a single package it offers three solutions - privileged account
Oracle Privileged Account Manager
Oracle Privileged Account Manager Protecting and Auditing Access to Sensitive Resources O R A C L E W H I T E P A P E R A P R I L 2 0 1 5 Disclaimer The following is intended to outline our general product
Security Protocols: SSH. Michael E. Locasto University of Calgary
Security Protocols: SSH Michael E. Locasto University of Calgary Agenda Philosophy: data protec?on on the network Discussion of SSH SSH history Authen?ca?on Mechanisms SSH2 design overview / architecture
Administration Guide NetIQ Privileged Account Manager 3.0.1
Administration Guide NetIQ Privileged Account Manager 3.0.1 December 2015 www.netiq.com/documentation Legal Notice For information about NetIQ legal notices, disclaimers, warranties, export and other use
Deploying Ubuntu Server Edition. Training Course Overview. (Ubuntu 10.04 LTS)
Deploying Ubuntu Server Edition Training Course Overview (Ubuntu 10.04 LTS) 1. Deploying Ubuntu Server Edition Course Overview About the Course and Objectives This advanced 40-hour course will provide
Oracle Privileged Account Manager 11gR2. Karsten Müller-Corbach karsten.mueller-corbach@oracle.com
R2 Oracle Privileged Account Manager 11gR2 Karsten Müller-Corbach karsten.mueller-corbach@oracle.com The following is intended to outline our general product direction. It is intended for information purposes
BEST PRACTICES FOR UNIX/LINUX PRIVILEGED IDENTITY AND ACCESS MANAGEMENT. PIM, PAM and PUM WHITE PAPER
WHITE PAPER PIM, PAM and PUM BEST PRACTICES FOR UNIX/LINUX PRIVILEGED IDENTITY AND ACCESS MANAGEMENT Fox Technologies, Inc. www.foxt.com sales@foxt.com 877.818.3698 PIM, PAM and PUM: Best Practices for
Open Directory. Apple s standards-based directory and network authentication services architecture. Features
Open Directory Apple s standards-based directory and network authentication services architecture. Features Scalable LDAP directory server OpenLDAP for providing standards-based access to centralized data
Windows Least Privilege Management and Beyond
CENTRIFY WHITE PAPER Windows Least Privilege Management and Beyond Abstract Devising an enterprise-wide privilege access scheme for Windows systems is complex (for example, each Window system object has
Virtualization Case Study
INDUSTRY Finance COMPANY PROFILE Major Financial Institution. BUSINESS SITUATION Internal security audits found that VMware ESX, Red Hat Linux, and Solaris systems lacked an efficient way to control access
ANNEXURE-1 TO THE TENDER ENQUIRY NO.: DPS/AMPU/MIC/1896. Network Security Software Nessus- Technical Details
Sub: Supply, Installation, setup and testing of Tenable Network Security Nessus vulnerability scanner professional version 6 or latest for scanning the LAN, VLAN, VPN and IPs with 3 years License/Subscription
VMware vcenter Log Insight Security Guide
VMware vcenter Log Insight Security Guide vcenter Log Insight 2.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new
Addressing the United States CIO Office s Cybersecurity Sprint Directives
RFP Response Addressing the United States CIO Office s Cybersecurity Sprint Directives How BeyondTrust Helps Government Agencies Address Privileged Account Management and Improve Security July 2015 Addressing
/ Preparing to Manage a VMware Environment Page 1
Configuring Security for a Managed VMWare Enviroment in VMM Preparing to Manage a VMware Environment... 2 Decide Whether to Manage Your VMware Environment in Secure Mode... 2 Create a Dedicated Account
Security Strategies: Controlling Privileged Account Access
Security Strategies: Controlling Privileged Account Access Privileged Account Management: Are you in control? Denis Mekinda 2011 Quest Software, Inc. ALL RIGHTS RESERVED Who knows what? Can you be sure?
WHITE PAPER. BeyondTrust PowerBroker : Root Access Risk Control for the Enterprise
WHITE PAPER BeyondTrust PowerBroker : Root Access Risk Control for the Enterprise Table of Contents Abstract 3 Poor Controls on Privileged Access: IT Risk at its Most Fundamental 3 Commodity Controls are
Why PCI DSS Compliance is Impossible without Privileged Management
Why PCI DSS Compliance is Impossible without Privileged Management Written by Joseph Grettenberger, compliance risk advisor, Compliance Collaborators, Inc. Introduction For many organizations, compliance
Using PowerBroker Identity Services to Comply with the PCI DSS Security Standard
White Paper Using PowerBroker Identity Services to Comply with the PCI DSS Security Standard Abstract This document describes how PowerBroker Identity Services Enterprise and Microsoft Active Directory
Managing UNIX Generic and Service Accounts with Active Directory
APPLICATION NOTE Managing UNIX Generic and Service Accounts with Active Directory Published: June 2007 Abstract Generic accounts are commonly used to enable UNIX administrative staff to log on to a computer
Whitepaper: Centeris Likewise Identity 3.0 Security Benefits
Whitepaper: Centeris Likewise Identity 3.0 Security Benefits Author: Manny Vellon VP, Product Development Centeris Corporation Abstract This document describes how Centeris Likewise Identity improves the
Achieving PCI Compliance for: Privileged Password Management & Remote Vendor Access
edmz Introduces Achieving PCI Compliance for: & Remote Vendor Access [ W H I T E P A P E R ] Written by e-dmz Security, LLC February 2010 C o p y r ig h t 2 0 1 0 e - D M Z S e c u r i t y, LL C. A l l
The Pitfalls of Encrypted Networks in Banking Operations Compliance Success in two industry cases
The Pitfalls of Encrypted Networks in Banking Operations Compliance Success in two industry cases Elba Horta Regional Sales Manager, Southern Europe SSH Communica1ons Security elba.horta@ssh.com ENABLE,
The Centrify Vision: Unified Access Management
The Centrify Vision: Unified Access Management Control, Secure and Audit Access To Your On-Premise and Cloud-based Infrastructure On-premise Centrify the Enterprise Cloud Personal Devices Mobile Devices
SmartCode. v5.0. VNC Manager. Award Winning Remote Computer Management Software. Powerful tool to control all your computers from one program
SmartCode TM VNC Manager v5.0 Award Winning Remote Computer Management Software Powerful tool to control all your computers from one program WELCOME TO NETWORK MANAGEMENT WITHOUT BARRIERS In today s large
What IT Auditors Need to Know About Secure Shell. SSH Communications Security
What IT Auditors Need to Know About Secure Shell SSH Communications Security Agenda Secure Shell Basics Security Risks Compliance Requirements Methods, Tools, Resources What is Secure Shell? A cryptographic
visionapp Remote Desktop 2010 (vrd 2010)
visionapp Remote Desktop 2010 (vrd 2010) Convenient System Management P roduct Information www.vrd2010.com Inhalt 1 Introduction... 1 2 Overview of Administration Tools... 1 2.1 RDP Administration Tools...
WHITE PAPER. Improving Efficiency in IT Administration via Automated Policy Workflows in UNIX/Linux
WHITE PAPER Improving Efficiency in IT Administration via Automated Policy Workflows in UNIX/Linux Table of Contents Executive Summary 3 Efficiency is the Driving Catalyst 3 Key Advantages in Automating
Small Systems Solutions is the. Premier Red Hat and Professional. VMware Certified Partner and Reseller. in Saudi Arabia, as well a competent
T R A I N I N G C O U R S E S T H E # 1 L I N U X A N D O P E N S O U R C E P R O V I D E R I N S A U D I A R A B I A Introd uction to Linux Administra tion Adva nce Linux Ad ministrati on Linux Identity
SUMMIT. November 2010
SUMMIT November 2010 Why Summit? Comprehensive Summit provides a unified approach to IT enterprise management following a prescriptive, ITIL based framework Rapid Deployment Summit is developed for and
SECURITY DOCUMENT. BetterTranslationTechnology
SECURITY DOCUMENT BetterTranslationTechnology XTM Security Document Documentation for XTM Version 6.2 Published by XTM International Ltd. Copyright XTM International Ltd. All rights reserved. No part of
Privileged Access Management 15.2 Available Features
Privileged Access Management 15.2 Available Features Features for Access Console Users Feature Name Multi-Platform Support Endpoint Access Console Windows Windows 2000 Pro SP4 Windows XP Pro SP3 Windows
Authentication in a Heterogeneous Environment
Authentication in a Heterogeneous Environment Integrating Linux (and UNIX and Mac) Identity Management in Microsoft Active Directory Mike Patnode VP of Technology Centrify Corporation mike.patnode@centrify.com
Dragonframe License Manager User Guide Version 1.2.2
Dragonframe License Manager User Guide Version 1.2.2 The Dragonframe License Manager (DFLM) provides floating license management for Dragonframe 3.0 and above. You must contact support (support@dragonframe.com)
Privileged Administra0on Best Prac0ces :: September 1, 2015
Privileged Administra0on Best Prac0ces :: September 1, 2015 Discussion Contents Privileged Access and Administra1on Best Prac1ces 1) Overview of Capabili0es Defini0on of Need 2) Preparing your PxM Program
OMU350 Operations Manager 9.x on UNIX/Linux Advanced Administration
OMU350 Operations Manager 9.x on UNIX/Linux Advanced Administration Instructor-Led Training For versions 9.0, 9.01, & 9.10 OVERVIEW This 5-day instructor-led course focuses on advanced administration topics
Advantages and Disadvantages of Open Source Privileged Identity Management
White Paper How Secure is your sudo? ~ The Good, the Bad, and the Ugly of Open Source Privileged Identity Management (PIM) Abstract Though not publicized or romanticized by the Information Technology community,
Active Directory and DirectControl
WHITE PAPER CENTRIFY CORP. Active Directory and DirectControl APRIL 2005 The Right Choice for Enterprise Identity Management and Infrastructure Consolidation ABSTRACT Microsoft s Active Directory is now
Achieving PCI Compliance for: Privileged Password Management & Remote Vendor Access
Achieving PCI Compliance for: Privileged Password Management & Remote Vendor Access [ W H I T E P A P E R ] Written by e-dmz Security, LLC April 2007 Achieving PCI Compliance A White Paper by e-dmz Security,
Privileged Access Management 15.3 Available Features
Privileged Access Management 15.3 Available Features Features for Access Console Users Feature Name Multi-Platform Support Endpoint Access Console Windows Windows 2000 Pro SP4 Windows XP Pro SP3 Windows
Kuppinger Cole Virtual Conference The Three Elements of Access Governance
Kuppinger Cole Virtual Conference The Three Elements of Access Governance Martin Kuppinger, Kuppinger Cole mk@kuppingercole.com December 8th, 2009 This virtual conference is sponsored by Axiomatics and
Cross-Realm Trust Interoperability, MIT Kerberos and AD
Cross-Realm Trust Interoperability, MIT Kerberos and AD Dmitri Pal Sr. Engineering Manager Red Hat Inc. 10/27/2010 1 INTERNAL ONLY PRESENTER NAME What is our focus? Traditional view on Kerberos interoperability
Unifying Authorization Models
Unifying Authorization Models Merging /etc/group and 'Domain Users' Gerald Carter Centeris jerry@samba.org http://www.samba.org/ Slide 1 Copyright G. Carter, 2006 Outline http://samba.org/~jerry/slides/lwny07_2up.pdf
Likewise Security Benefits
Likewise Enterprise Likewise Security Benefits AUTHOR: Manny Vellon Chief Technology Officer Likewise Software Abstract This document describes how Likewise improves the security of Linux and UNIX computers
Firewall Builder Architecture Overview
Firewall Builder Architecture Overview Vadim Zaliva Vadim Kurland Abstract This document gives brief, high level overview of existing Firewall Builder architecture.
Record and Replay All Windows and Unix User Sessions Like a security camera on your servers
Record and Replay All Windows and Unix User Sessions Like a security camera on your servers ObserveIT is the only enterprise solution that records both Windows and Unix user sessions, supporting all methods
Using Likewise Enterprise to Boost Compliance with Sarbanes-Oxley
Likewise Enterprise Using Likewise Enterprise to Boost Compliance with Sarbanes-Oxley IMPROVE SOX COMPLIANCE WITH CENTRALIZED ACCESS CONTROL AND AUTHENTICATION With Likewise Enterprise, you get one user,
Seven Steps to Complete Privileged Account Management. August 2015
Seven Steps to Complete Privileged Account Management August 2015 2015. Beyond Trust. All Rights Reserved. Warranty This document is supplied on an "as is" basis with no warranty and no support. This document
Direct Control for Mobile & Supporting Mac OS X in Windows Environments
Direct Control for Mobile & Supporting Mac OS X in Windows Environments Leveraging Existing IT Staff Knowledge, Processes and Infrastructure to Support Mac OS X Systems and Their Users Ed Frola Senior
N02-IBM Managed File Transfer Technical Mastery Test v1
N02-IBM Managed File Transfer Technical Mastery Test v1 Number: 000-N02 Passing Score: 750 Time Limit: 120 min File Version: 1.0 http://www.gratisexam.com/ The IBM/Sterling Managed File Transfer Suite
SOLUTION BRIEF CA CONTROLMINDER. Privileged Identity Management with CA ControlMinder
SOLUTION BRIEF CA CONTROLMINDER Privileged Identity Management with CA ControlMinder CA ControlMinder is a comprehensive solution for privileged identity management that enables you to manage shared account
OnCommand Unified Manager
OnCommand Unified Manager Operations Manager Administration Guide For Use with Core Package 5.2 NetApp, Inc. 495 East Java Drive Sunnyvale, CA 94089 U.S. Telephone: +1(408) 822-6000 Fax: +1(408) 822-4501
Credibly secure cloud storage with elfcloud
Credibly secure cloud storage with elfcloud Privacy of private clouds with the cost of the public cloud Datacenter IaaS workshop 2014 / 12.9.2014 Tuomas Tonteri Founder and CEO Abstract elfcloud is a Finland
Self-Service Active Directory Group Management
Self-Service Active Directory Group Management 2015 Hitachi ID Systems, Inc. All rights reserved. Hitachi ID Group Manager is a self-service group membership request portal. It allows users to request
The Power of One. A Simplified Approach to Identity and Access Management. Written by Quest Software, Inc.
The Power of One A Simplified Approach to Identity and Access Management Written by Quest Software, Inc. Copyright Quest Software, Inc. 2008. All rights reserved. This guide contains proprietary information,
Securing your Virtual Datacenter. Part 1: Preventing, Mitigating Privilege Escalation
Securing your Virtual Datacenter Part 1: Preventing, Mitigating Privilege Escalation Before We Start... Today's discussion is by no means an exhaustive discussion of the security implications of virtualization
Software Automated Testing
Software Automated Testing Keyword Data Driven Framework Selenium Robot Best Practices Agenda ² Automation Engineering Introduction ² Keyword Data Driven ² How to build a Test Automa7on Framework ² Selenium
Contents. Part 1 SSH Basics 1. Acknowledgments About the Author Introduction
Acknowledgments xv About the Author xvii Introduction xix Part 1 SSH Basics 1 Chapter 1 Overview of SSH 3 Differences between SSH1 and SSH2 4 Various Uses of SSH 5 Security 5 Remote Command Line Execution
IBM Tivoli Netcool Configuration Manager 6.3 Administration and Implementation
IBM Tivoli Netcool Configuration Manager 6.3 Administration and Implementation Duración: 5 Días Código del Curso: TN550G Temario: This course provides a comprehensive set of skills needed to install, configure,
Red Hat Enterprise IPA Identity & Access Management for Linux and Unix Environments. Dragos Manac 01.10.2008
Red Hat Enterprise IPA Identity & Access Management for Linux and Unix Environments Dragos Manac 01.10.2008 Agenda The Need for Identity & Access Management Enterprise IPA Overview Pricing Questions to
Identity Management Basics. OWASP May 9, 2007. The OWASP Foundation. Derek Browne, CISSP, ISSAP Derek.Browne@Emergis.com. http://www.owasp.
Identity Management Basics Derek Browne, CISSP, ISSAP Derek.Browne@Emergis.com May 9, 2007 Copyright The Foundation Permission is granted to copy, distribute and/or modify this document under the terms
Major Retailer Achieves Compliance With the PCI Data Security Standard
Leading Online Retailer INDUSTRY Online retail clothing sales COMPANY PROFILE This world-class apparel business operates multiple enterprises under multiple brands. BUSINESS SITUATION Had difficulty meeting
OracleAS Identity Management Solving Real World Problems
OracleAS Identity Management Solving Real World Problems Web applications are great... Inexpensive development Rapid deployment Access from anywhere BUT. but they can be an administrative and usability
CONNECTING TO DEPARTMENT OF COMPUTER SCIENCE SERVERS BOTH FROM ON AND OFF CAMPUS USING TUNNELING, PuTTY, AND VNC Client Utilities
CONNECTING TO DEPARTMENT OF COMPUTER SCIENCE SERVERS BOTH FROM ON AND OFF CAMPUS USING TUNNELING, PuTTY, AND VNC Client Utilities DNS name: turing.cs.montclair.edu -This server is the Departmental Server
BOF2337 Open Source Identity and Access Management Expert Panel, Part II. 23 September 2013 5:30p Hilton - Golden Gate 6/7/8 San Francisco CA
Open Source Identity and Access Management Expert Panel, Part II 23 September 2013 5:30p Hilton - Golden Gate 6/7/8 San Francisco CA slide 2 Expert Panel Emmanuel Lécharny, Apache Software Foundation Howard
Directory-as-a-Service Primer (DaaS)
Directory-as-a-Service Primer (DaaS) Directory-as-a-Service or DaaS is the modern adaptation of traditional Microsoft Active Directory (AD) and Lightweight Directory Access Protocol (LDAP). It is a cloud-based
2013 AWS Worldwide Public Sector Summit Washington, D.C.
Washington, D.C. Next Generation Privileged Identity Management Control and Audit Privileged Access Across Hybrid Cloud Environments Ken Ammon, Chief Strategy Officer Who We Are Security software company
www.xceedium.com 2: Do not use vendor-supplied defaults for system passwords and other security parameters
2: Do not use vendor-supplied defaults for system passwords and other security parameters 2.1: Always change vendor-supplied defaults and remove or disable unnecessary default accounts before installing
PCI COMPLIANCE ON AWS: HOW TREND MICRO CAN HELP
SOLUTION BRIEF PCI COMPLIANCE ON AWS: HOW TREND MICRO CAN HELP The benefits of cloud computing are clear and compelling: no upfront investment, low ongoing costs, flexible capacity and fast application
Oracle Audit Vault and Database Firewall. Morana Kobal Butković Principal Sales Consultant Oracle Hrvatska
Oracle Audit Vault and Database Firewall Morana Kobal Butković Principal Sales Consultant Oracle Hrvatska The following is intended to outline our general product direction. It is intended for information
Security Advice for Instances in the HP Cloud
Security Advice for Instances in the HP Cloud Introduction: HPCS protects the infrastructure and management services offered to customers including instance provisioning. An instance refers to a virtual
The IDG 9074 Remote Access Controller
secure Agent Secure Enterprise Solutions Product Overview The IDG 9074 Remote Access Controller 2448 E. 81 st St, Ste 2000 Tulsa OK 74137-4271 USA Tel: 918.971.1600 Fax: 918.971.1623 www.secureagent.com
SWOT Assessment: BeyondTrust Privileged Identity Management Portfolio
SWOT Assessment: BeyondTrust Privileged Identity Management Portfolio Analyzing the strengths, weaknesses, opportunities, and threats Publication Date: 11 Jun 2015 Product code: IT0022-000387 Andrew Kellett