Quest - Privileged Password Management (PPM)

Privileged Password Management (PPM)

Organizational risk associated with unauthorized administrative level access is extensive Secure, audited password release and change control management Ubiquitous, secure password accessibility 24x7x365 Solution.

The Privileged Password ManagementT (PPM) was specifically designed to provide a commercial solution to the problem of shared administrative password management. Designed in a purpose build appliance form factor, the PPM addresses the storage, release, update, and auditing of administrative passwords.

Product Highlights:

• Easy-to-Install Appliance
• Embedded HW Firewall
• Secure Password Storage
• Password Release Controls
• Password Change Controls
• Extensive Audit and Reports
• Extensive Platform Support
• DR/BC Options
• API and CLI
• Optional Session Control
• Optional Session Recording & Replay

Privileged Password Management (PPM)

Secure Purpose Built Appliance - PPM appliances include an embedded hardware based firewall for network protection and full AES-256 disk encryption.

Secure Password Storage - Individual passwords are encrypted a second time using a different key prior to storage in the PPM database for added protection.

Dual & Auto Release Controls - Release of passwords can either be auto-approved by PPM or require dual (or more) release authorization.

Individual Accountability - A key compliance requirement is to deliver individual accountability to shared privileged passwords. PPM will not release an account password to more than one authorized requestor at a time..

Password Change Controls - PPM supports both time based and last use based password change controls configurable on a per system or account basis.

Extensive Platform Support - PPM supports password change controls for most servers including mainframe, mid-range, Unix, windows and others. PPM also supports most network devices & firewalls as well as databases and other enterprise applications.

Reports & Audit - Every action with PPM is fully audited and available via interactive reports, schedule reports or exportable in excel, .csv or scheduled for export. In addition, PPM allows Syslog and SNMP trap data to be exported to a receiver or collector. Firewall logs and SMTP and SNMP trap information is also available.

Optional Session Control/Recording - PPM can be extended to include session controls, proxy and recording through an add-on PSM software package or working in conjunction with deployed PSM appliances. Capabilities include session authorization, auto-login of session, full session recording and session replay.

Privileged Password Management (PPM)

• Auto password change capabilities across multiple users and platforms
• A Dual-Control mechanism to enable regulatory compliance
• An end-to-end security solution, protecting your passwords during transmission, and while in storage
• A strong auditing solution with time and date stamping to track password usage, where passwords are stored, with a history of all versions, and the changes made
• A granular access control mechanism to control who has access to each password
• Ubiquitous, secure password accessibility
• Robust reporting capabilities for displaying systems under control as well as users and their level of access
• A clientless, plug-and-play solution

   

Compliant management of...

• Privileged Account Passwords
• Shared Account Passwords
• Service Account Passwords
• Embedded Application Password
• Embedded Script Passwords

Privileged Password Management(PPM)

Datasheets

Whitepapers