BASTION | PRIVILEGED ACCESS MANAGEMENT

Privileged Access Management

THE WALLIX BASTION SECURES YOUR STRATEGIC AND CRITICAL ASSETS TO PROTECT YOU FROM CYBER RISKS.

BASTION FORM FACTOR

Our solution adapts to your organization’s unique requirements for on-premise or on-demand deployments.

BASTION MODULES

The WALLIX Bastion is a Privileged Access Management (PAM) solution made up of three modules:

SESSION MANAGER
Monitors all activity and controls privileged access in real-time

PASSWORD MANAGER
Manages passwords and SSH keys in a consolidated vault

ACCESS MANAGER
Centralizes privileged access through a web administration console

SESSION MANAGER

SESSION MANAGER provides real-time monitoring of all privileged users’ access and sessions to prevent and to detect malicious activity.

MANAGE ACCESS

AND USER ACTIVITY

VIEW OUR OFFERS

FEATURES

• Privileged account management and access governance: Super-administrators have direct access to accounts using native clients (PuTTY, WinSCP, OpenSSH). They can embed various connection rules using context-relevant configurations and access validation workflows.

• Real-time view of privileged user activity: Security teams can easily view and monitor all application, RDP, and SSH sessions. The session manager can also alert security teams of suspicious activity and remotely terminate sessions by utilizing advanced features like: whitelisting/blacklisting, OCR (Optical Character Recognition), “4-Eyes” supervision mode, widget event reports, keyboard input flow analysis, and more.

• Report and audit: Increase the accountability of all privileged account actions by tracking connections, generating statistical activity reports and audit logs, reviewing recorded user sessions, generating scripts, and gathering session metadata.

• Behavioral analysis and business intelligence: Utilize the session manager to quickly detect suspicious behavior in an effort to identify and prevent malicious activities. You can integrate this information into a variety of security information and event management (SIEM) systems for automatic decision making and/or alert reporting. Our session manager integrates with a variety of SIEM systems including QRadar, Splunk, LogPoint, etc.

• Interoperability: Easily integrate with console scriptings, web applications, and heavy clients (Salesforce, Sage, Fortinet, McAfee …).

BENEFITS

• Meet compliance requirements (HIPAA, GDPR, PCI-DSS, NIST, SOX, NERC CIP …).

• Maintain control over all sessions with the ability to automatically or remotely shutdown suspicious sessions.

• Accelerate incident analysis and increase IT systems resilience.

• Scale the session manager with the rest of the Bastion’s modules or with third-party privileged access management (PAM) systems.

• Rapid deployment into existing environments to optimize Total Cost of Ownership (TCO).

• Maintain team productivity and organizational processes with transparent integrations that don’t impact operations.

REQUEST A LIVE DEMO

PASSWORD MANAGER

PASSWORD MANAGER enables super-administrators to regain control over access governance by managing password complexity and guaranteeing that passwords are not divulged or hijacked.

VIEW OUR OFFERS

FEATURES

• Password vault: secure passwords and SSH keys in a certified vault (encryption algorithm AES 256) and utilize our open architecture to integrate with other vaults.

• Management and security: schedule password and SSH keys rotation and revocation, by utilizing high level management granularity that allows you to enforce security policies through customizable workflows.

• Application-to-Application Password Management (AAPM): enable application authentication with credentials and SSH keys validation against the WALLIX Bastion. Through this innovative approach to authentication, hard-coded passwords and identification configuration files can be deleted from systems.

• Interoperability: provides a library of passwords plugins supporting markets standards (Microsoft, Linux/Unix, Cisco, Fortinet, Palo Alto…)

BENEFITS

• Meet compliance requirements (HIPAA, GDPR, PCI-DSS, NIST, SOX, NERC CIP …).

• Optimize access security and reduce risk exposure by maintaining control over shared accounts, service accounts, hard-coded passwords, etc.

• Receive alerts in real-time and analyze incidents post-mortem.

• Rapid deployment into existing environments to optimize Total Cost of Ownership (TCO).

REQUEST A LIVE DEMO

ACCESS MANAGER

This module provides security teams with a centralized console for privileged access management. It provides an exhaustive real-time list of all privileged users’ logins, sessions, and actions to mitigate risk and prevent cyber-attacks.

VIEW OUR OFFERS

FEATURES

• Customizable admin portal: Fully customize the design of your administrative portal. Determine how it classifies files, and how files are transferred between workstations and targeted Windows sources. Plus, quickly communicate with different target Bastions via the encrypted https channel.

• Authentication: In addition to traditional “directory” authentications, ACCESS MANAGER supports SAML 2.0 and integrates with all infrastructures that utilize identity federation mechanisms.

• Multi-tenant architecture & scalability: Ensure that your organization is secure even when using multi-tenant architecture. If a resource can be accessed through several Bastions, you can define and create active Bastion clusters for a clear visualization of exactly what resources are accessible by multiple Bastions.

• Audit and compliance: In addition to the standard Bastion functionality, the ACCESS MANAGER has its own audit functions, providing an unalterable audit trail of all the sessions it has authorized. The audit log includes a multi-criteria search engine which facilitates searches within script and session metadata and has the capability to fully replay sessions for further review.

BENEFITS

• Meet compliance requirements (HIPAA, GDPR, PCI-DSS, NIST, SOX, NERC CIP …).

• Manage and secure all Bastions within a centralized system.

• Flexible deployment options adapted to companies’ unique organizational and technological developments, including the deletion of VPN connections as appropriate.

• Adapt to existing authentication systems by using our prepackaged approach to Multi-Factor Authentication (MFA) with partners.

• Rapid deployment into existing environments.

REQUEST A LIVE DEMO

BASTION MODULES

SESSION MANAGER

PASSWORD MANAGER

ACCESS MANAGER

FOLLOW WALLIX

ABOUT WALLIX

NEWS & EVENTS

WALLIX NEWSLETTER