BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Understanding Who Has Access to What with BeyondInsight v5.1

Posted April 15, 2014    Morey Haber

Today, it’s my pleasure to introduce you to BeyondInsight version 5.1, the latest release of our IT Risk Management platform, which unifies several of our solutions for Privileged Account Management and Vulnerability Management.

BeyondInsight v5.1 embodies BeyondTrust’s mission to give our customers the visibility they need to make smart decisions and reduce risk to their IT assets and users. In my next few posts, I’ll share details on some key new features that deliver upon this mission, including:

  • New Asset Profile Data: view users, services and permissions for all detected network systems
  • QualysGuard Cloud Connector: seamlessly import QualysGuard vulnerability assessment data and view together with vulnerability data from Retina CS and other solutions
  • Custom Vulnerability Alerts: trigger custom, targeted email alerts of new or updated vulnerability audits in the Retina CS Vulnerability Management database
  • Exploit Availability Filter: isolate vulnerabilities and Smart Groups targeted by known, active exploits

As you can tell from the title of this post, we’ll start with a closer look at Asset Profile Data, which delivers increased visibility by providing asset drill-down information with complete details of all local user accounts on any given asset. The BeyondInsight console now enumerates users and permissions for each system it detects during Asset Detection and Profiling. This enables security and IT operations teams to easily identify rogue accounts and misappropriated privileges.

Consider the example in the screenshot below, which depicts user details for a particular Windows system:

BI5 1-Users

This sample workstation has several accounts for solutions created by BeyondTrust – plus a local user account for the system’s owner. This user account is in the Administrator Group and represents a policy violation for many organizations. In a typical environment, end users should not have local accounts, and they definitely should not have administrative privileges for their systems! Fortunately, with BeyondInsight v5.1, you can view this information in the user interface, document it in automated reports, and even monitor it via Smart Rules with alerts if a user attempts to create a new account on a system.

Do you have this kind of visibility into your assets today?

This detailed asset profile data doesn’t stop with BeyondInsight reporting. For instance, the next release of PowerBroker Password Safe, now in beta, will include BeyondInsight platform capabilities. Password Safe users will therefore be able to leverage asset profile data as they control, vault, and audit access to privileged user and service accounts.

Asset Profiling, along with BeyondInsight’s other platform capabilities, enables unprecedented collaboration and coordination between your privilege and vulnerability management initiatives. As a result, you gain visibility into who has access to what, which risks threaten your users and assets, and what to do to strengthen security and achieve compliance.

> Download the BeyondInsight v5.1 New Features Overview
> Request a free trial
> Learn more about BeyondInsight

Tags:
, , , , , , , , , , , ,

Leave a Reply

Additional articles

red-thumbprint

Why big data breaches won’t always be so easy

Posted September 19, 2014    Byron Acohido

This blog post is republished with the permission of ThirdCertainty. See the original post here. – By: Byron Acohido, Editor-In-Chief, ThirdCertainty Some day, perhaps fairly soon, it will be much more difficult for data thieves to pull off capers like the headline-grabbing hacks of Home Depot and Target. That’s not a pipe dream. It’s the projected outcome…

Tags:
, , , , ,
pbps-blog2

8 Reasons Your Privileged Password Management Solution Will Fail

Posted September 18, 2014    Chris Burd

Leveraging complex, frequently updated passwords is a basic security best practice for protecting privileged accounts in your organization. But if passwords are such a no-brainer, why do two out of three data breaches tie back to poor password management? The fact is that not all privileged password management strategies are created equal, so it’s critical…

Tags:
, , , , , ,
pbps-customer-campaign-image

You Change Your Oil Regularly; Why Not Your Passwords?

Posted September 11, 2014    Chris Burd

There are many things in life that get changed regularly:  your car oil, toothbrush and hopefully, your bed sheets.  It’s rare that you give these things much thought – even when you forget to change them. But what if you’re forgetting something that can cost you millions of dollars if left unchanged for long periods…

Tags:
, , ,