News Categories
20Indeed Certificate Manager 27Releases 9certificate management 7PKI 10PKI management 9Indeed Access Manager 7access management 5authentication 2MFA 3multi-factor authentication 20Indeed Privileged Access Manager 12PAM 11privileged access management 7Release notes 3Indeed ESSO 11News 1#AccessManagement 1#IdentityManagement 2IAM 19Indeed CM 6Press release 1CA 1CertificateAuthority 1CertificateManagement 2CMS 2cryptovision 2Smart cards 2smartcardmanagement 4#RISK2019 43Events 7Uncategorized 3#mindshare 19Indeed PAM 4webinar 8Video 7Indeed AM 10partnership 20events 12Release 1BlackHatEurope2019 1Coronavirus 1COVID-19 3video 2Indeed Identity News 10news 1Corporate Systems 1All News 7Interviews 3interview 23Company news 1use case 3BusinessBreakfast 1AnalyticalReport 1IndeedPAM 1KuppingerCole 1Cryptonite 1Trustech 2IDCsummit 3it-sa 1conference 1GISEC 1IDC 1SITAfrica 1compliance 3Axidian Privilege 1all news 1Axidian CertiFlow 8Axidian Shield 6Identity Security 6ITDR 3GITEX 3BlackHatMiddleEast 1CyberX 2Zero Trust
News
Indeed Privileged Access Manager (Indeed PAM) – version 2.0
Posted by anna.vlasenko on 04 December 2019 11:29 AM

We introduce the next version of Indeed Privileged Access Manager software for access control of privileged users. The main additional features of Indeed Privileged Access Manager version 2.0 are dedicated SSH Proxy component, DBMS accounts management and command-line utility for managing solution settings. These and other specifications are below.

SSH PROXY 

The SSH Proxy has been developed for the Indeed PAM 2.0 software package to monitor SSH sessions without using Microsoft Remote Desktop Services. The new approach to the management of the privileged SSH sessions will reduce the cost of the solution (as it doesn’t require RDS licenses), and the company’s employees will be able to use any SSH client for work.

The previous version of Indeed PAM 1.2 implemented an approach with a published SSH client that was installed on the RDS server.

CONNECTOR FOR WORKING WITH DBMS

Indeed PAM 2.0 added a connector for working with DBMS, which has the following functionality:

  • Getting a list of accounts
  • Checking account passwords
  • Reset account passwords

The connector supports the following database management systems:

  • Microsoft SQL Server
  • PostgreSQL
  • MySQL
  • Oracle Database

NEW FEATURES OF THE COMMAND-LINE UTILITY

Before we mentioned that Indeed PAM can be operated through a web interface and through a command-line application. The first version of the utility had limited functionality and allowed:

  • Batch issuance of permissions 
  • Batch revocation of permissions
  • Import of resources from CSV file into Indeed PAM database

We have extended the functionality of this utility in Indeed PAM 2.0 and added the following features:

  • Setup of access schedule when issuing permissions 
  • Batch creation of privileged accounts
  • Batch resource creation
  • Removing privileged accounts
  • Removing resources
  • Specification of SSH key when creating accounts, both batch and single.

CACHING THE SECOND AUTHENTICATION FACTOR

Indeed PAM uses two-factor authentication to provide access to the target resources before starting the session: the first factor is the domain password, the second is TOTP.

For the convenience of work with privileged sessions, the mechanism of caching of the second factor was developed. It will cache the input of the second factor for a specified time.

The system can be configured to request for a second factor, for example, once per hour or another set value.

DOWNLOAD SCREENSHOTS AS A SINGLE ARCHIVE

A new feature to work with screenshots has been added to Indeed PAM 2.0. Now you can save a full archive of screenshots for further analysis in the workplace, and not only view snapshots from the admin console, as was in the previous versions.

The post Indeed Privileged Access Manager (Indeed PAM) – version 2.0 appeared first on Indeed-ID Blog.
Comments (0)
Post a new comment
 
 
Full Name:
Email:
Comments: