LIGHTWEIGHT PRIVILEGED ACCESS MANAGEMENT (PAM)

What is LIGHTWEIGHT PRIVILEGED ACCESS MANAGEMENT (PAM)?

Manage access. Audit activity. Respond to incidents.

THE CHALLENGE

Privileges grant power. Uncontrolled privileges mean danger. With ekran system's privileged access management (PAM) capabilities, you'll have the power to:

• Secure remote access to critical endpoints
• Get full visibility into all privileged accounts
• Granularly control access requests and permissions
• Monitor and audit privileged user activity
• Ensure compliance

THE EKRAN SYSTEM HELPS COMPANIES

• Stop internal threats
• Fully protect critical assets
• easily asse by cybersecurity audits
• Access maximum PAM resources for a reasonable price

Privileged access and session management through a jump box

Ekran System PAM resources have been developed in accordance with NIST recommendations. You can use them to ensure secure remote access to critical endpoints by managing RDP sessions initiated on your jump servers.

With PAM's capabilities in the Ekran System, you can:

• Secure access to your Active Directory environment as well as Linux/Unix and Windows endpoints
• Protect your web-based access
• Specify terminals that can be accessed by users with specific privileges
• Limit the time for which access is granted
• Provide temporary credentials for specific users and groups
• Automatically generate, encrypt, and manage credentials for privileged users

You can also use ekran system PAM capabilities to ensure secure remote access to your critical terminals for third-party vendors, contractors, and remote employees.

Password management

Forget the need to deploy password management software with extra privileges. The Ekran system includes a sophisticated privileged password management solution with all the features you need to properly manipulate and protect your secrets:

• Password vault for secure storage and delivery of secrets
• Automatic and manual password rotation for Windows and AD accounts
• Role-based access control
• SSH Key Management
• Password management for shared accounts (Windows, Linux)
• Web account password management

The Ekran System provides military-level data encryption and uses only FIPS 140-2-compliant encryption algorithms. All data and connections, including privileged account credentials and client-server connections, are encrypted with AES-256 keys and an RSA-1024 or RSA-2048 algorithm.

Access request and approval workflow

Minimize cybersecurity risks and control the number of active accounts simultaneously with ekran system's just-in-time PAM capabilities:

• Manual access approval to determine who can access what and when
• Single-use (OTP) passwords to protect temporary access to specific endpoints, including emergency access
• Integration with major ticketing systems, including SysAid and ServiceNow for cross-checking and validation of reasons for privileged access requests
• Time-based user access restrictions to increase data protection and critical systems
• Monitor, record, and manage user activity in all sessions initiated with temporary credentials.

Multi-factor authentication

Strengthen the protection of your critical assets with the Ekran System's two-factor authentication tool (2FA). This tool is part of the rich set of identity and access management features.

The Ekran System multi-factor authentication tool enhances the user verification process by combining user credentials and time-based single-use passwords. This privileged identity management solution is included in any Ekran system license and runs on Windows Server and Windows and macOS terminals.

Continuously monitor all privileged accounts

Monitoring is an essential part of managing privileged accounts. With the Ekran system, you can continuously monitor, record, and audit all privileged terminal sessions.

If a server connection is temporarily limited or lost, the lightweight Ekran System Client will continue recording the session in offline mode. Once the connection is restored, all information will be uploaded to the Ekran system server.

In addition, the Ekran System can automatically generate a large set of user activity reports, allowing you to take a close look at each user action and analyze overall user activity.

Real-time alerts and incident response

Enable proactive monitoring of privileged activities with the help of the Ekran System's actionable alert system.

Use the extensive template rules library or set custom targeted alerts to detect abnormal user behavior. Block users, shut down apps, and send real-time notifications to identify privileged access abuse in near real-time.

For each alert, you can optionally assign an automated incident response action that will be performed along with the security team notification: show a warning message to the user, delete an application, or block the user.

System requirements:

CPU: 1.8 GHz dual core processor

RAM: 2 GB

HDD / SSD: 50 GB of free space on the main drive

Operating system: Microsoft Windows 8 32-bit, Microsoft Windows 7 32-bit and Microsoft Windows Vista 32-bit

Resolution: 1024×768

Supported operating systems

Mac OS X 10.5 x (Leopard), Mac OS X 10.6 (Snow Leopard), Mac OS X 10.7 (Lion), Mac OS X 10.7 (Mountain Lion), OS X 10.9 (Mavericks) and Mac OS X 10.10 (Yosemite)

Hardware requirements

Memory - 1 GB of RAM and more

Free disk space - 50 MB

System type - 32-bit and 64-bit OS