Centrify Server Suite

What is Centrify Server Suite?

Identity consolidation, privilege management, and auditing

Centrify Server Suite combines comprehensive bridge of Linux and UNIX systems with Active Directory with powerful privilege management and session monitoring across Windows, Linux, and UNIX systems. The end result is increased security, improved compliance, and comprehensive reporting and auditing.

Centrify Server Suite: EXECUTIVE BENEFITS

Reduce the risk of security failures

Protect critical information and minimize the attack surface by providing only the required levels of access to IT systems.

Make compliance efforts efficient and effective

Easily see who has access to which IT resource and how that access is used in the enterprise.

Accelerate income with a trusted partner

Get feedback quickly through an experienced identity management leader with more than 5000 customers.

Secure the future of your identity strategy

Make identity a central element of your security strategy with a scalable solution that will meet future needs.

Manage identities for cross-platform systems in Active Directory

Protect Linux, UNIX, Mac, and devices with the same consistent identity management services currently installed on your Windows systems. An integrated set of tools centralizes user administration, discovery, and management for Linux and UNIX systems to enable rapid identity consolidation in Active Directory.

Simplify privilege management for Windows, Linux, and UNIX

Protect mission-critical servers from internal identity-related risks and external attacks. Simplify the implementation of a minimal privilege access model on Windows, Linux, and UNIX systems. Simplify the creation and management of administrative positions and rights with a robust set of tools that automate much of the process.

Detailed monitoring and reporting of privileged sessions

Delete anonymous activities by associating all privileged accounts with an individual account versus a shared account. Exclusive session auditing, video playback, research capabilities, and comprehensive compliance reporting establish accountability mechanisms and simplify regulatory compliance. IT teams can identify suspicious activity, resolve system failures, and conduct forensic investigations into failures.

Dynamically segment and isolate cross-platform systems

Prevent unauthorized access to sensitive processing resources and data, add policy-driven protection against network attacks for mixed Windows, Linux, and UNIX environments, and improve regulatory compliance. Protect access to sensitive information by isolating and protecting systems and enabling complete encryption of data on the go without the need for expensive and complex network devices.

ACTIVE DIRECTORY BRIDGE - Centrify Server Suite

Consolidated identity for Linux and UNIX

Unify your IT infrastructure by consolidating identity management, authentication, and access for Linux and UNIX in Microsoft Active Directory.

Rapid identity consolidation

Consolidate user identities for more than 450 platforms in Active Directory with a non-invasive solution that simplifies IT processes. Take advantage of existing investments in infrastructure and skill sets.

Individual accountability. Simplified compliance.

Associate access rights and privileges with individuals through your Active Directory accounts. Ensure accountability and enable comprehensive compliance reporting on who has access to which systems.

Reduce operating costs

Reduce the helpdesk load by enabling single sign-on to more than 450 Linux and UNIX systems.

Improve security with access controls

Grant users the right to access only systems necessary for business purposes based on their position(s) at work.

Administrative separation of tasks

Harness the power of Centrify Zone-based access controls. Define administrative boundaries for system sets that have their own authorized users, administrators, and security policies.

Active Directory Bridge most popular and powerful in the industry

Natively integrate more than 450 Linux and UNIX systems into Active Directory, transforming the Linux or UNIX system into a client. Protect systems using the same authentication services and Group Policies currently deployed to Windows systems. Leverage the knowledge gained from more than 5,000 customers and industry-leading support to manage the complexity and nuances of Active Directory's enterprise environments.

Consolidate user profiles. Apply task separation.

Centrify's patented Zones technology consolidates complex, disparate non-Windows identities in Active Directory for greater security and control. No software is installed on domain controllers, and no schema changes are required to store UNIX identity data in Active Directory. Centrify Zones leverages active directory's own delegation model to ensure separation of administrative tasks.

Thousands of successful deployments powered by powerful tools

Built on the experience of more than 5000 successful customers, Centrify offers assessment, deployment, migration and management services, as well as innovative reporting tools and wizards. Time-saving automation is facilitated with extensive CLI and scripting options.

PRIVILEGE MANAGEMENT - Centrify Server Suite

Manage privileges globally for Windows, Linux, and UNIX

A flexible, highly granular privilege management solution enables users to do their work, reduces risks, and facilitates the implementation of a minimal privilege approach with position-based access controls.

A single source of identity makes it easy to assign, change, and audit privileges

Reduce the risk of attacks through privileged accounts. Using minimum privilege access limits possible damage caused by security failures.

Increase security and accountability mechanisms by keeping fewer accounts shared. Easily assign or cancel the correct privileges for users on Windows, Linux, and UNIX systems.

Achieve operational efficiency through integrated authorization, authentication, and auditing, leveraging existing active directory investments.

Prove compliance with industry regulations and mandates for auditors with a single view of user privilege control and security.

Make sure that all privileged activity is linked to an individual. Users connect with their own accounts, easily elevate privileges, and all activity is audited.

Position-based access controls make it easy to have minimal privilege

Least privilege access gives you solid controls over your users' privileges and reduces the risk of a variety of threats. Centrify's patented Zones technology offers highly granular post-based access controls that simplify the implementation of a minimal privilege access model on more than 450 Windows, Linux, and UNIX platforms.

Easy elevation of privileges with dynamic access restrictions

Protect your Windows, Linux, and UNIX systems by controlling exactly who can access what and when.  Unlike single-purpose decentralized tools such as sudo, Centrify Server Suite allows you to configure dynamic privileges so that users can elevate privileges only at specific times, for a period of time, and on certain servers. You can also isolate servers based on time and trusts to further protect sensitive data.

Powerful tools automate the creation and assignment of privileges

Centrify Server Suite offers a powerful set of tools to simplify the adoption and management of a least privilege dwell access model. Server Suite includes tools to assess identity-related risks, assign predefined roles and rights, import existing sudo files, automate the creation of new positions and rights, create reports, and meet audit requirements.

AUDIT AND COMPLIANCE - Centrify Server Suite

Monitor privileged sessions and simplify regulatory compliance

Centrify Server Suite provides complete video capture of privileged sessions, linking all activities to individual users to improve accountability, forensic investigation, and compliance.

Gain granular visibility into accesses, privileges, and activities, and audit approval

Record and manage a global view of privileged activities across more than 450 varieties of Windows, Linux, and UNIX.

Make sure that the session log cannot be circumvented with host-based auditing.

Prove compliance with reports on each user's privileges and associated activity.

Proactively identify internal threats and simplify forensic investigations with indexed metadata.

Track high-risk activities through selective audit capture based on audit policies.

Ensure that privileges are granted, used as intended, and always connected to a user through integrated identity management, privileges, and auditing.

Find out exactly who did what, where and when

Record fully indexed sessions to track exactly who did what, when, and on which server. Record all privileged sessions or only selected sessions, based on your audit policies. View session summaries or identify specific activities by searching event data and video captures of sessions on Windows, Linux, and UNIX systems. Go directly to any point in the video based on the recorded commands or clicks to see the user's action and result.

Demonstrate compliance and simplify forensic investigations

Show that security controls are active and working as expected, and provide proof of compliance. Search and find session records by server, user, or customize searches. You can find all sessions for a specific user or server, or for a set of custom criteria, simplifying forensic investigations and proactively identifying internal threats or suspicious activity.

Generate reports on access and the use of privileges on servers to demonstrate compliance

Easily provide important information for increasingly complex audits. Generate reports about who did what, where and when, and who has access to what and how that access can be used. Select a ready report or create your own. Get comprehensive reporting with a unified privilege management and auditing solution based on a common platform.

SERVER ISOLATION - Centrify Server Suite

Dynamically isolate and protect cross-platform systems

Protect sensitive information by dynamically isolating and protecting cross-platform systems. Protect data on the go through full port-based encryption.

Leveraging its existing Active Directory infrastructure and native IPsec support integrated with today's operating systems, Centrify Server Suite seamlessly blocks communication between untrusted systems and trusted systems – without the need to change your network or applications.

Centrify Server Suite improves compliance with regulatory compliance initiatives and provides an additional layer of policy-driven protection against network attacks for mixed Windows, Linux, and UNIX environments. Centrify allows you to:

Make it difficult to prevent threats from unauthorized computers by preventing "untrusted" systems — systems not authenticated through a PKI certificate or an Active Directory Kerberos entry — from communicating with "trusted" systems.

Protect yourself from internal threats by restricting access and dynamically targeting your network with tiered access and stricter control over who can access system groups.

Enable optional full encryption of data on the go.

Automate certificate provisioning on Linux and UNIX with a client for the Microsoft certificate server that can be managed by Group Policy and protected via Kerberos.

Cost-effectively extend your Active Directory infrastructure and host-based network protection functionality to Linux and UNIX.

System requirements

Linux and windows