BeyondTrust BeyondInsight & Password Safe v. 7.0 Release: Enhanced Performance & User Experience

With the release of version 7.0, BeyondInsight and Password Safe improve on key features and capabilities in onboarding automation, user experience, and platform support to continue to provide the highest levels of scalability and ease of use.

BeyondInsight is BeyondTrust’s platform for centralized management, reporting, and threat analytics for Privilege Access Management (PAM). It delivers unmatched visibility and control over privileged access activity, it simplifies deployment, automates tasks, improves security, and reduces privilege-related risks.

Password Safe combines privileged password and privileged session management to discover, manage, and audit all privileged credential activity. Together, BeyondInsight and Password Safe enable organizations to achieve complete control and accountability over privileged accounts.

Here’s a brief summary of what’s new with the release of version 7.0

Migration to HTML5

As a software platform for the production and display of interactive multimedia content, Adobe Flash changed the look of the Internet after its inception more than a decade ago. Password Safe, like many applications, was built with this technology to enable an interactive experience through a web browser.

Adobe Flash will move to an ‘End of Life’ stage at the end of 2020. BeyondTrust embarked on a project to remove Flash from Password Safe and move to a more modern user interface technology stack: HTML5.

We are excited to announce that we have completed the migration to HTML5. Version 7.0 is the first version to completely eliminate Flash from the user and admin interfaces. This move has enabled significant improvements in the performance of Password Safe.

During this project, we have also taken the opportunity to revisit much of the underlying Password Safe code to introduce performance enhancements that you will see across the product. With all screens moved over to HTML5, customers will notice more even tile sizes and dynamic resizing on the BeyondInsight home page, as well as a faster, responsive interface throughout.

Figure 1: Example of screen moved to HTML5. Now it is easier to edit data with a faster, more responsive interface

Enhanced Automation: Distributed Smart Rule Processing

This new feature enables Smart Rule processing to be spread among available Worker Nodes using the new 64-bit Smart Rules engine. This will help customers accelerate processing of large numbers of systems and large amounts of Smart Rules.

Discovery Scan Wizard

BeyondInsight v7.0 introduces a simplified scan wizard, which improves the scanning task workflow and provides interactive feedback depending on scan parameters selected, greatly enhancing the user experience.

New Platform Support: Internet Information Services (IIS) Application Pool

Password Safe v. 7.0 adds support for updating IIS Application Pools using accounts managed through the solution. This extends support on the Windows platform that already includes Windows Service Accounts and Scheduled Task accounts.

Support for Kex Algorithms

Key exchange (Kex) algorithms are continually evolving, and, in their lifecycle, they reach the point of being obsolete. Some of the Kex algorithms within Password Safe are approaching obsolescence. As such, there is a need to update the Kex available to include more modern solutions with longer lifespans. The SSH Key Exchange algorithms used by Password Safe have been updated. This update ensures that many of the latest Kex algorithms are available for use across your environment.

RDP Multi-Monitor Support

Users opening sessions through Password Safe onto Windows systems want to take advantage of their local system having multiple monitors to give them more screen real estate.

Password Safe 7.0 now offers support for multiple monitors to be used through RDP sessions (for targets that support the capability). This opens up the possibility of having more screen real estate available while working on remote systems.

API – Single Account Aliases

Customers requested the ability to create aliases for accounts that only apply to a single account. Using a single account alias enables account names to be abstracted where only a single account is in scope.

In version 7.0, customers can create Aliases for individual accounts through the API enabling the abstraction of the actual account name from the requested account name.