BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Understanding Who Has Access to What with BeyondInsight v5.1

Posted April 15, 2014    Morey Haber

Today, it’s my pleasure to introduce you to BeyondInsight version 5.1, the latest release of our IT Risk Management platform, which unifies several of our solutions for Privileged Account Management and Vulnerability Management.

BeyondInsight v5.1 embodies BeyondTrust’s mission to give our customers the visibility they need to make smart decisions and reduce risk to their IT assets and users. In my next few posts, I’ll share details on some key new features that deliver upon this mission, including:

  • New Asset Profile Data: view users, services and permissions for all detected network systems
  • QualysGuard Cloud Connector: seamlessly import QualysGuard vulnerability assessment data and view together with vulnerability data from Retina CS and other solutions
  • Custom Vulnerability Alerts: trigger custom, targeted email alerts of new or updated vulnerability audits in the Retina CS Vulnerability Management database
  • Exploit Availability Filter: isolate vulnerabilities and Smart Groups targeted by known, active exploits

As you can tell from the title of this post, we’ll start with a closer look at Asset Profile Data, which delivers increased visibility by providing asset drill-down information with complete details of all local user accounts on any given asset. The BeyondInsight console now enumerates users and permissions for each system it detects during Asset Detection and Profiling. This enables security and IT operations teams to easily identify rogue accounts and misappropriated privileges.

Consider the example in the screenshot below, which depicts user details for a particular Windows system:

BI5 1-Users

This sample workstation has several accounts for solutions created by BeyondTrust – plus a local user account for the system’s owner. This user account is in the Administrator Group and represents a policy violation for many organizations. In a typical environment, end users should not have local accounts, and they definitely should not have administrative privileges for their systems! Fortunately, with BeyondInsight v5.1, you can view this information in the user interface, document it in automated reports, and even monitor it via Smart Rules with alerts if a user attempts to create a new account on a system.

Do you have this kind of visibility into your assets today?

This detailed asset profile data doesn’t stop with BeyondInsight reporting. For instance, the next release of PowerBroker Password Safe, now in beta, will include BeyondInsight platform capabilities. Password Safe users will therefore be able to leverage asset profile data as they control, vault, and audit access to privileged user and service accounts.

Asset Profiling, along with BeyondInsight’s other platform capabilities, enables unprecedented collaboration and coordination between your privilege and vulnerability management initiatives. As a result, you gain visibility into who has access to what, which risks threaten your users and assets, and what to do to strengthen security and achieve compliance.

> Download the BeyondInsight v5.1 New Features Overview
> Request a free trial
> Learn more about BeyondInsight

Tags:
, , , , , , , , , , , ,

Leave a Reply

Additional articles

Sudo_logo

Don’t Create a Different sudoers File for Each System

Posted May 20, 2015    Randy Franklin Smith

What if you have multiple Linux and/or Unix systems? Sudo management can become onerous and unwieldy if you try to manage a different sudoers file on each system. The good news is that sudo supports multiple systems.

password-safety

What Does Microsoft Local Administrator Password Solution Really Do?

Posted May 19, 2015    Morey Haber

LAPS is a feature that allows the randomization of local administrator accounts across the domain. Although it would seem that this capability overlaps with features in BeyondTrust’s PowerBroker Password Safe (PBPS), the reality is it is more suited for simple use cases such as changing the local Windows admin account and not much more.

Tags:
, ,
webinar_ondemand

On Demand Webinar: Securing Windows Server with Security Compliance Manager

Posted May 14, 2015    BeyondTrust Software

On Demand Webinar: Security Expert Russell Smith, explains how to use Microsoft’s free Security Compliance Manager (SCM) tool to create and deploy your own security baselines, including user and computer authentication settings.

Tags:
, ,