Unix Privilege Escalation - Unix Privilege Manager - Unix User Privileges

What platforms are supported by PowerBroker Servers?

PowerBroker for Servers supports 30 different UNIX/Linux platforms including:

  • RedHat Enterprise Linux
  • Sun Solaris
  • SuSE Linux Enterprise
  • VMware ESX
  • HP-UX
  • IBM AIX
  • Debian GNU
  • A complete list of "certified" platforms can be found in the PowerBroker Servers README document.

    Which types of encryption does PowerBroker Servers support?

    PowerBroker Servers provides 30 different encryption algorithms, including the U.S. Government standard Advanced Encryption Standard (AES), for administrators to implement per their enterprise security model.

    How configurable are PowerBroker Servers’ reporting features? Does PowerBroker Servers have Entitlement Reporting?

    PowerBroker Servers offers a web-based report generator and exports reports in XML/HTML and CSV format. Reports include tracking user entitlements/activities and password approvals. Reports are highly configurable, allowing as many as 120 custom data points/columns.

    Entitlement reporting is an essential element of audit control. PowerBroker Servers’ Entitlement Reports allow auditors and administrators to quickly review which user(s) can do what, where and when, down to the command level. If your organization implemented security policies to restrict user access to specific programs during certain times of the day, this will also be illustrated in the Entitlement Report.

    Can PowerBroker Servers authenticate against third-party directory services applications (e.g., Active Directory and LDAP)?

    Yes. More enterprises are using Active Directory and LDAP for authentication throughout their network. Configuring PowerBroker for Servers to authenticate against Kerberos and LDAP/AD is performed in just a few steps.

    Can PowerBroker Servers centrally audit and manage logs produced across multiple servers?

    Yes. Log synchronization is a feature administrators can use with the management of PowerBroker Servers logs to organize data from multiple servers and store on one central server. This functionality further enables organizations to comply with governmental regulations through secure logging and reliable audit trails.

    What are security policy files?

    Security policy files are used to build “trust” conditions. Once enough "trust" is established, privileged access is allowed. Rule-based files grant access based on time of day, machine, user ID, etc. Users can be assigned expanded privileges within a controlled environment. The security policy file supports a wide range of programming functions (if, else, case), string/parsing (strip, atoi, basename), and other functions.

    How configurable is PowerBroker Servers to match an enterprise’s unique IT security policies?

    Using highly-configurable scripting language, PowerBroker Servers gives administrators the ability to restrict user access to specific applications, commands and files. Administrative options include managing system programs, mounting devices, performing backups, and adding new users. Tasks will be delegated to individuals or groups at a granular level, thus reducing the risk of accidental damage and the threat of malicious activities. PowerBroker Servers also delegates user access to files, directories and third-party applications and accounts (i.e. database, CRM, ERP, SAP), including generic accounts.

    Does BeyondTrust offer any packaged installations for PowerBroker Servers?

    Yes. BeyondTrust offers native package installation bundles for Solaris, Linux, HP-UX and AIX systems to facilitate the installation of PowerBroker Servers across large multi-platform environments. Administrators will have the ability to deploy PowerBroker Servers to multiple servers from a remote location, reducing the time and cost associated with having to locally deploy in multiple locations throughout the enterprise.

    Does PowerBroker Servers have any single points of failure?

    No. PowerBroker for Servers does not have a single point of failure. This is in stark contrast to “open source” solutions that have a monolithic architecture. Several PowerBroker Servers failover masters can be deployed as necessary to support your unique architectural and high availability needs.

    Does PowerBroker Servers impact performance on UNIX/Linux machines?

    There is no notable impact on secure shell (SSH) system performance when PowerBroker Servers is running. PowerBroker Servers can be installed, configured, used, reconfigured, and un-installed without rebooting any hosts or making any changes in configuration. The complete PowerBroker Servers solution can be implemented without any significant modifications to your organization’s applications or machines.

    Can administrators view sessions in real-time?

    Yes. The pbreplay utility enables administrators to view any terminal session in real-time or at a later date.

    Contact BeyondTrust

    +1 (800) 234-9072
    +1 (818) 575-4040

    News, Networking and Fun

    Blog - Current Articles
    Twitter - @BeyondTrust
    Facebook - /BeyondTrust
    Linkedin - BeyondTrust Company
    YouTube - BeyondTrust TV

    INSTANT WINNER!