BeyondTrust Call Us:
US/Canada: 1-800-234-9072
Direct Dial:  1-818-575-4000


HotPick

Tomorrow's Technology Today

Contact Us
Sales: 1-800-234-9072
Support: 1-818-575-4040

Enterprise-class Solution for Unix/Linux Access Control & Accountability


Securely delegate root and other special account privileges
Integrates with PowerSeries Management Console (PSMC) for enhanced RBAC, automated event and I/O log reviews, approval workflows, and audit trails
Provides granular user task logging down to the keystroke
Provides highly configurable policy scripting to define who may run which Unix/Linux task to/from which host, when, and under what conditions

BeyondTrust PowerBroker® is a comprehensive IT security and accountability solution designed to implement a consistent protocol of access control across most Unix/Linux platforms. PowerBroker allows system administrators to delegate administrative privileges and authorization without disclosing the root password. Administrators also gain the ability to grant selective access to other Unix/Linux applications and corporate resources.

Administrative tasks such as managing system programs, mounting devices, performing backups, or adding/updating users, can be delegated to individuals or groups at a granular level, thus reducing the risk of accidental damage and threat of malicious activities. PowerBroker also manages user access to files, directories, and third-party applications/accounts (e.g., HR, financial or database programs – including generic accounts).

PowerBroker effectively protects the most powerful user account, superuser or root, from hackers who could remove critical system files, gain access to confidential data, and delete audit trails.


PowerBroker Diagram - How PowerBroker Works

The Master Host validates requested tasks against security policy files to either approve or reject user requests. Accepted requests are executed on the Run Host as a privileged user. All activity is securely logged and recorded by the Log Servers.


Secure Access to UNIX/Linux Administrative Privileges

Granularly delegate Unix/Linux root privileges for specific tasks
Secure application generic account privileges (e.g., Oracle®, MYSQL®, SAP)
Restrict command line interface (CLI) access to programs and applications
Control access to files and directories



Centralized, Unassailable Administration

Implement host-by-host restrictions, while maintaining a centralized policy
Integrate with Pluggable Authentication Modules (PAM) for session control and password verification, allowing for easy interface with local, LDAP and NIS/NIS+ accounts
Integrate with SafeNet Luna SA HSM for enterprises requiring FIPS 140-2 validation*
Integrate with BeyondTrust PowerSeries™ Management Console (PSMC)**
Support for 25 encryption algorithms for policy/configuration files, log servers and network traffic
Optionally configures Idle Session Timeouts
Support of PKI using OpenSSL
Client/server architecture designed to support fault tolerant operations



Extensive Unix/Linux Security Policy Development & Enforcement

Comprehensive access control policies using a "C-like" scripting language
User-friendly web console for non-programmers to speed policy development
Highly configurable security policy options that can enable access by user, Unix/Linux group, netgroup, and/or host
Highly configurable security policy options that can restrict access by day, date and time, and restrict access to and from specified hosts, including remote hosts
Optional restricting or replacement of specific Unix/Linux commands, including su and r-commands
Active Directory and LDAP querying capability for authentication and access authorization



Comprehensive Logging & Reporting of Unix/Linux Activity

Event logs capture detailed information about each task request
Comprehensive "keystroke logs" to capture complete I/O sessions
Web-based log viewers for auditors
Exports reports in CSV and XML format
Entitlement Reporting for auditors/administrators to investigate which users are authorized to perform what tasks, from what machine, and between what periods of time – addressing one of today’s more pressing issues for enterprise compliance and control



Non-Intrusive Application – Rapid Deployment

NO modification is required for enterprise Unix/Linux kernels and operating systems
NO system reboot is required after a PowerBroker installation/update
Optional failover servers are available for fault tolerant or load balanced operations
Highly-configurable to handle system operations on either side of a firewall



*SafeNet Luna SA HSM Integration

PowerBroker integrates with SafeNet Luna SA HSM (Hardware Security Module) to provide powerful hardware-key management for U.S. and Canadian government agencies requiring FIPS 140-2, Level 2 and Level 3 validation.



** BeyondTrust PowerSeries™ Management Console Integration

The BeyondTrust PowerSeries™ Management Console provides centralized management capabilities, and streamlined policy change management workflows and incident alert workflows for multiple PowerBroker installations through a convenient web interface. BeyondTrust PowerBroker® natively integrates with the PowerSeries™ Management Console to deliver the following:

Automated workflows for policy creation and change management to comply with segregation of duties and security best-practices
Automated workflows for event and I/O log reviews and acknowledgements, and centralized audit trails, for streamlined audit support and heightened security awareness
Centralized management of multiple PowerBroker® Master Servers through a single web based management console with automated policy propagation, to simplify administration and lower costs in complex IT environments
Automated log centralization for multi-server deployments, to streamline audit and compliance support and to reduce costs through consolidation of logging resources
A graphical policy editor for PowerBroker® users that have limited UNIX expertise (e.g. helpdesk professionals), to reduce administrative costs and accommodate flexible workflows



Supported Unix/Linux Platforms

Screenshots

PowerBroker Entitlement Report
Entitlement Report

PowerBroker Entitlement Report
Entitlement Report

PowerBroker Entitlement Report
Entitlement Report

PowerBroker Policy Editor
Policy File Editor

PowerBroker Keystroke Log
Keystroke Log Viewer

PowerBroker Eventlog
Event Log Reporter

PowerBroker Eventlog
Event Log Reporter

PowerBroker Eventlog
Event Log Reporter

 


© 1985-2010 BeyondTrust Software, Inc. All rights reserved.

Site MapContact UsPrivacy Policy/ California Privacy RightsHome