Upload File

pre-con ed: privileged access management for hybrid enterprises

  • Home
  • Technology
  • Pre-Con Ed: Privileged Access Management for Hybrid Enterprises
12
World ® ’1 6 Privileged Access Management for Hybrid Enterprises Shawn W. Hank, Sr. Principal Consultant, Security CA Technologies SCX04E SECURITY

Upload: ca-technologies

Post on 08-Jan-2017

181 views

Category:

Technology


0 download

Report

TRANSCRIPT

Page 1: Pre-Con Ed: Privileged Access Management for Hybrid Enterprises

World®’16

PrivilegedAccessManagementforHybridEnterprisesShawnW.Hank,Sr.PrincipalConsultant,SecurityCATechnologies

SCX04E

SECURITY

Page 2: Pre-Con Ed: Privileged Access Management for Hybrid Enterprises

2 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

©2016CA.Allrightsreserved.Alltrademarksreferencedhereinbelongtotheirrespectivecompanies.

Thecontentprovidedinthis CAWorld2016presentationisintendedforinformationalpurposesonlyanddoesnotformanytypeofwarranty. The informationprovidedbyaCApartnerand/orCAcustomerhasnotbeenreviewedforaccuracybyCA.

ForInformationalPurposesOnlyTermsofthisPresentation

Page 3: Pre-Con Ed: Privileged Access Management for Hybrid Enterprises

3 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Abstract(inonlineagenda)

Privilegedaccountsareacoreattackvectorincountless,devastatingdatabreachesandareincreasinglythefocusofdemandingcompliancemandates.ThissessionwillprovideanoverviewoftheCATechnologiesstrategyforprivilegedaccessmanagement,includinganin-depthexplorationofthekeycapabilitiesofCAPrivilegedAccessManager,suchasforcredentialmanagement;strongauthentication;role-based,leastprivilegeaccesscontrol;commandfiltering,andsessionmonitoringandrecordingfromasinglepointofcontrolacrosstheentirehybridenterprise.You’llalsolearnhowCAPrivilegedAccessManagerprovidestruedefense-in-depthandgreatersecurityforprivilegedaccountsbyseamlesslyworkingwithotherkeyenterprisesolutionsincludingCAPrivilegedAccessManagerServerControl,migrationpathsforCAPrivilegedIdentityManagercustomerstoCAPrivilegedAccessManagerandCAPrivilegedAccessManagerServerControl,andhelpdesksolutionsforprivilegedaccessservicemanagement.

ShawnHank

CATechnologiesSr.PrincipalConsultant,Presales

Page 4: Pre-Con Ed: Privileged Access Management for Hybrid Enterprises

4 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Abstract

§ Privilegedaccountsareacoreattackvectorincountlessdevastatingdatabreaches,andareincreasinglythefocusofdemandingcompliancemandates.ThissessionwillprovideanoverviewofCATechnologiesstrategyforprivilegedaccessmanagement,includinganin-depthexplorationofthekeycapabilitiesofCAPrivilegedAccessManager,CATechnologiessolutionforprotectinganddefendingprivilegedaccountsandcredentialsfromattack,andmanaging,controlling,andauditingtheactivitiesofprivilegedusers

Page 5: Pre-Con Ed: Privileged Access Management for Hybrid Enterprises

5 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

TheCASolutionPortfolioComprehensivePrivilegedAccessManagement

§Ac

cessre

quests

§Ce

rtificatio

n§

Riskana

lytic

s

§ Strongauthentication,includingMFA§ Credentialmanagement§ Policy-based,leastprivilegeaccesscontrol§ Commandfiltering§ Sessionrecording,auditing,attribution§ Applicationpasswordmanagement§ Comprehensive,hybridenterpriseprotection§ Self-contained,hardenedappliance

§

§ In-depthprotectionforcriticalservers§ Highly-granularaccesscontrols§ Segregateddutiesofsuper-users§ Controlledaccesstosystemresourcessuchas

files,folders,processesandregistries§ SecuredTaskDelegation(sudo)§ EnforceTrustedComputingBase

IDENTITY-BASEDSECURITY HOST-BASEDSECURITY

DEFENSEINDEPTH

CAPrivilegedAccessManager CAPrivilegedAccessManagerServerControl

CAID

ENTITYSUITE

Page 6: Pre-Con Ed: Privileged Access Management for Hybrid Enterprises

6 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

CAPrivilegedAccessManagerPrivilegedAccountManagementfortheHybridEnterprise

HYBRIDENTERPRISETraditionalDataCenter

Mainframe,Windows,Linux,Unix,Networking

EnterpriseAdminTools

SoftwareDefinedDataCenter

SDDCConsoleandAPIs

PublicCloud- IaaS

CloudConsoleandAPIs

SaaSApplications

SaaSConsolesandAPIs

HardwareAppliance AWSAMIOVFVirtualAppliance

IdentityIntegration Enterprise-ClassCore

CAPrivilegedAccessManager

§ VaultCredentials§ CentralizedAuthentication§ FederatedIdentity§ PrivilegedSingleSign-on

§ Role-BasedAccessControl§ MonitorandEnforcePolicy§ RecordSessionsandMetadata§ FullAttribution

ANewSecurityLayer- ControlandAuditAllPrivilegedAccess

UnifiedPolicyManagement

Page 7: Pre-Con Ed: Privileged Access Management for Hybrid Enterprises

7 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

HYBRIDCLOUDENVIRONMENT

IntegratedControlsandUnifiedPolicyManagement

Positively

Authen

ticateUsers

Vault&

Manage

Cred

entia

ls

RestrictA

ccessto

Authorize

dSystem

s

Fede

rateIden

tity

andAttributes(SSO

)

Mon

itora

nd

EnforcePo

licy

RecordSessio

ns

andMetadata

AttributeIden

tity

forS

haredAccoun

ts

TraditionalDataCenter

PrivateCloud

PublicCloud

CAPrivilegedAccessManagerinaction

Page 8: Pre-Con Ed: Privileged Access Management for Hybrid Enterprises

8 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Demonstration

Page 9: Pre-Con Ed: Privileged Access Management for Hybrid Enterprises

9 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

ResultsCAPrivilegedAccessManagerisacentralcomponentofCATechnologiesportfolioofprivilegedaccessmanagementsolutions.Itdeliverscomprehensivefunctionality,spanningtheentirehybridenterprise,inaformfactorthat’sfastandeasytodeployandavoidsadditionalhiddencosts.

SummaryAFewWordstoReview

Page 10: Pre-Con Ed: Privileged Access Management for Hybrid Enterprises

10 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

RecommendedSessions

SESSION# TITLE DATE/TIME

SCX15E MeettheCAPrivilegedAccessManagerTeam 11/14/2016at11:00am

SCX29E DeepDive:CAPrivilegedAccessManager 11/14/2016at1:00pm

SCT22S CARoadmap:PrivilegedAccessManagement 11/16/2016at4:30pm

Page 11: Pre-Con Ed: Privileged Access Management for Hybrid Enterprises

11 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Don’tMissOurINTERACTIVESecurityDemoExperience!

SNEAKPEEK!

11 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD

Page 12: Pre-Con Ed: Privileged Access Management for Hybrid Enterprises

@CAWORLD#CAWORLD ©2016CA.AllRIGHTSRESERVED.12 @CAWORLD#CAWORLD

Security

FormoreinformationonSecurity,pleasevisit:http://cainc.to/EtfYyw


BeyondTrust Privileged Remote Access Integration with … · 2020-04-07 · BeyondTrust Privileged Remote Access Integration with Privileged Identity Author: BeyondTrust Technical

Brand Book Capgemini · Towards the enterprise hybrid cloud Adopting a hybrid cloud strategy enables enterprises to move each workload to the environment which meets its requirements

SecurityDAM - Hybrid DDoS Protection for MSSPs and Enterprises (Infosecurity 2014 - London, UK)

Hybrid thin films of graphene nanowhiskersand …PRIVILEGED DOCUMENT FOR REVIEW PURPOSES ONLY 1 Supporting Information for Hybrid thin films of graphene nanowhiskersand amorphous carbonas

Request for Proposal 3101 For Procurement of Privileged ... · privileged access management solutions sometimes synonymously referred as ^privileged account management and privileged

Intelligent Enterprises Are integrated Enterprises · Intelligent Enterprise Integration Architecture Guide for Cloud and Hybrid Landscapes – • Deep dive on Integration patterns

Cloud Data Management for Digital Enterprises · Cloud Data Management for Digital Enterprises One software platform. Backup and recovery, DR, archival, and more. Built for hybrid

BeyondTrust Privileged Remote Access Password …...BeyondTrust Privileged Remote Access Password Safe Integration Author BeyondTrust Technical Communication Subject BeyondTrust Privileged

Intel® Hybrid Cloud Drives Business Transformation · Investing in the hybrid cloud allows enterprises to drive digital transformation. HYBRID CLOUD GIVES YOU BENEFITS OF. Faster

Hybrid App Development Using RAD Tools A Buzzword For Enterprises

Privileged Programs

Tech Talk: Defense In Depth Privileged Access Management for Hybrid Enterprises

Privileged Piety

PRIVILEGED COMMUNICATION AND PRIVILEGED DOCUMENTS - Law …redengine.lawsociety.sk.ca/inmagicgenie/documentfolder/AC0635.pdf · PRIVILEGED COMMUNICATION AND PRIVILEGED DOCUMENTS "SPECIAL

Privileged Communications

Hybrid Cloud Solutions to Transform Your Enterprise€¦ · Hybrid Cloud Solutions to Transform Your Enterprise Solutions for Media & Entertainment & Enterprises of all kinds

Privileged Docs

Hybrid Social Enterprises in South Africa: Tax Issues and Business Models

1 Hitachi ID Privileged Access ManagerHitachi ID Privileged Access Manager works by randomizing privileged passwords and connecting people and programs to privileged accounts as needed:

Hybrid Cloud - Q Associates · Hybrid cloud promises the agility, economics and performance that enterprises are seeking in order to achieve the best business outcomes. However, no

As the security threat landscape continues to evolve ......CLOUD DPS | DS020917 NSFOCUS HYBRID DDOS DEFENSES Many service providers and enterprises utilize a hybrid approach to defeat

New Hybrid Web 2.0 Adoption Framework for Enterprises

Privileged & Confidential

(126) SECTION II - PRIVILEGED COMMUNICATION … II - PRIVILEGED COMMUNICATION BIOGRAPHICAL ... "Digital Image Processing for the Rectification ... SECTION II -PRIVILEGED COMMUNICATION

TRANSFORM YOUR ENTERPRISE WITH HYBRID CLOUD · 2016-11-18 · TRANSFORM YOUR ENTERPRISE WITH HYBRID CLOUD. ... Gartner reports that 50% of enterprises will be using hybrid cloud by

Best Practices for Privileged Identity Management in the ... · Best Practices for Privileged Identity Management in the Modern Enterprise To some degree, modern hybrid organizations

HYBRID FINANCE FOR SOCIAL ENTERPRISES - … · HYBRID FINANCE FOR SOCIAL ENTERPRISES SoCareNet Europe Jahreskonferenz Dr. Markus Freiburg Prag, 27. ... Hybrid financing Combination

MANAGING HYBRID ENTERPRISES › sites › default › files › article › downloads › M… · Managing Hybrid Enterprises: A Practical Guide Overview This is a guidebook drawing

1 Hitachi ID Privileged Access Manager - IAM Solutions · Hitachi ID Privileged Access Manager works by randomizing privileged passwords and connecting people and programs to privileged

ZERO TRUST IDENTITY · 3:30 Adaptive Access Management for Enterprises SecureAuth / Netskope / LogRhythm 4:00 Delegation of Access Management and trust elevation for privileged access

One-person enterprises and the phenomenon of hybrid self … · 2017-08-23 · One-person enterprises and the phenomenon of hybrid self-employment: evidence from an empirical study

Privileged Access

Implement a Hybrid Cloud Strategy with Cisco CloudCenter ... · Rise of the Hybrid Cloud Model A hybrid cloud model offers enterprises a more holistic approach in which a public cloud

Telling the New DCG Story - Master Slide Library · Most enterprises are adopting a hybrid cloud strategy 71% of enterprises adopt hybrid cloud Microsoft: “Cloud is a Model not

Hybrid Cloud for Modern Enterprises | Microsoft … Cloud for Modern Enterprises | Microsoft Azure Stack ... ACS Blob Service ... Resource providers provide the foundation for any