BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Advanced Architectures with the Retina Protection Agent

Posted May 31, 2013    Morey Haber

One of the extended features of Retina CS is the Retina Protection Agent. This component is licensed with Retina and allows for users to assess hosts for vulnerabilities using a local scanning agent verses a network scan. This forgoes the need of a traditional SaaS or on-premise vulnerability assessment solution to perform a scan outside of the corporate campus. This requirement is very common among clients that need a PCI DSS Report or a traditional vulnerability assessment report for mobile Windows devices. A traditional authenticated network scan does not work because the local firewall would need to be disabled, remote file and print sharing exposed to the Internet, and the device powered on at a fixed IP address at the same time of the scan. All of these can lead to a complete disaster since the device defensive’s are essentially turned off. There is really no way around this type of assessment even if you host an appliance in-house and try to scan backwards across a VPN connection. The results just do not come out well and a getting a reliable report from all device in scope becomes problematic.

BeyondTrust has a solution for this problem. The architecture below is for the Retina Protection Agent and Retina CS using a hardened UVM50 appliance:

RPA-screenshot

Windows XP, 7, Vista, or 8 laptops are loaded with the Retina Protection Agent (which co-exists with your existing security solutions including anti-virus) and performs a local vulnerability assessment on a scheduled basis. The scan is non intrusive and does not impact the performance of the system. The results are encrypted and sent to the appliances within the corporate DMZ. From there, users can view complete details regarding the asset and generate reports for regulatory compliance and asset inventory. If the device is offline, the results are held and forwarded in a throttled fashion when a connection can be established. Audit updates can be sent directly from BeyondTrust or from the same appliance in order to make sure your critical reports are up to date.

BeyondTrust has solved the problem of remote vulnerability assessment using agent technology. These agents can be used on desktops or servers; anywhere a scan of a Windows device would fail using a network vulnerability assessment technology. This overcomes STIG hardening, firewalls, disabled accounts, and even remote systems for complete vulnerability management.

Our zero gap coverage for vulnerability assessment includes network scanners, agents, cloud resources, and even mobile devices. We can help provide the information you need to maintain regulatory compliance with your assets and users. Learn more!

Tags:
, , , ,

Additional articles

gartner market guide image - aug 2014

Introducing the Gartner Market Guide for Privileged Account Management

Posted July 29, 2014    Chris Burd

Gartner recently released a new Market Guide for Privileged Account Management (PAM), and we’d like to share a complimentary copy with you. The report includes PAM market analysis and direction, vendor overviews, and recommendations for selecting PAM solutions for your environment. BeyondTrust is one of two representative vendors (out of 20) to address all solution…

Tags:
, , , , , , , ,
Integrating Least Privilege and Password Management to Solve Account Security Challenges

Integrating Least Privilege and Password Management to Solve Account Security Challenges

Posted July 24, 2014    Morey Haber

There is a reason all BeyondTrust Privileged Account Management (PAM) solutions share the PowerBroker name: They all inherently enable you to reduce user-based risk and can be integrated under a centralized IT risk management platform. Here’s one common use case that demonstrates how this integration changes the playing field. Consider the challenge of privileged access:…

Tags:
, , , , ,
PowerBroker Password Safe Password Age Report

Reshaping Privileged Password Management with Password Safe 5.2

Posted July 21, 2014    Martin Cannard

Today, we’re pleased to unveil the latest edition of our privileged password management solution, PowerBroker Password Safe. I’ll start with a brief intro of what’s new and then tell you a little about the driving factors behind Password Safe development. New features for mitigating password risk and ensuring accountability enterprise-wide Here’s the 10,000-foot overview of…

Tags:
, , ,