BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Understanding Who Has Access to What with BeyondInsight v5.1

Posted April 15, 2014    Morey Haber

Today, it’s my pleasure to introduce you to BeyondInsight version 5.1, the latest release of our IT Risk Management platform, which unifies several of our solutions for Privileged Account Management and Vulnerability Management.

BeyondInsight v5.1 embodies BeyondTrust’s mission to give our customers the visibility they need to make smart decisions and reduce risk to their IT assets and users. In my next few posts, I’ll share details on some key new features that deliver upon this mission, including:

  • New Asset Profile Data: view users, services and permissions for all detected network systems
  • QualysGuard Cloud Connector: seamlessly import QualysGuard vulnerability assessment data and view together with vulnerability data from Retina CS and other solutions
  • Custom Vulnerability Alerts: trigger custom, targeted email alerts of new or updated vulnerability audits in the Retina CS Vulnerability Management database
  • Exploit Availability Filter: isolate vulnerabilities and Smart Groups targeted by known, active exploits

As you can tell from the title of this post, we’ll start with a closer look at Asset Profile Data, which delivers increased visibility by providing asset drill-down information with complete details of all local user accounts on any given asset. The BeyondInsight console now enumerates users and permissions for each system it detects during Asset Detection and Profiling. This enables security and IT operations teams to easily identify rogue accounts and misappropriated privileges.

Consider the example in the screenshot below, which depicts user details for a particular Windows system:

BI5 1-Users

This sample workstation has several accounts for solutions created by BeyondTrust – plus a local user account for the system’s owner. This user account is in the Administrator Group and represents a policy violation for many organizations. In a typical environment, end users should not have local accounts, and they definitely should not have administrative privileges for their systems! Fortunately, with BeyondInsight v5.1, you can view this information in the user interface, document it in automated reports, and even monitor it via Smart Rules with alerts if a user attempts to create a new account on a system.

Do you have this kind of visibility into your assets today?

This detailed asset profile data doesn’t stop with BeyondInsight reporting. For instance, the next release of PowerBroker Password Safe, now in beta, will include BeyondInsight platform capabilities. Password Safe users will therefore be able to leverage asset profile data as they control, vault, and audit access to privileged user and service accounts.

Asset Profiling, along with BeyondInsight’s other platform capabilities, enables unprecedented collaboration and coordination between your privilege and vulnerability management initiatives. As a result, you gain visibility into who has access to what, which risks threaten your users and assets, and what to do to strengthen security and achieve compliance.

> Download the BeyondInsight v5.1 New Features Overview
> Request a free trial
> Learn more about BeyondInsight

Tags:
, , , , , , , , , , , ,

Leave a Reply

Additional articles

Integrating Least Privilege and Password Management to Solve Account Security Challenges

Integrating Least Privilege and Password Management to Solve Account Security Challenges

Posted July 24, 2014    Morey Haber

There is a reason all BeyondTrust Privileged Account Management (PAM) solutions share the PowerBroker name: They all inherently enable you to reduce user-based risk and can be integrated under a centralized IT risk management platform. Here’s one common use case that demonstrates how this integration changes the playing field. Consider the challenge of privileged access:…

Tags:
, , , , ,
PowerBroker Password Safe Password Age Report

Reshaping Privileged Password Management with Password Safe 5.2

Posted July 21, 2014    Martin Cannard

Today, we’re pleased to unveil the latest edition of our privileged password management solution, PowerBroker Password Safe. I’ll start with a brief intro of what’s new and then tell you a little about the driving factors behind Password Safe development. New features for mitigating password risk and ensuring accountability enterprise-wide Here’s the 10,000-foot overview of…

Tags:
, , ,
PowerBroker for Windows tamper protection

PowerBroker for Windows 6.6 Tamper Protection

Posted July 18, 2014    Morey Haber

I have a bone to pick: Stopping an administrator from performing an action on a system is futile endeavor. As an administrator, there is always a way to circumvent a solution’s from tampered protection. Really! By default, Windows administrators have unrestricted access to the system – and even though an application, hardened configuration, or group policy…

Tags:
, ,