Zurück
-
Titel
What does Privilege Manager for Sudo do ? -
Beschreibung
This document is to explain the features and benefits of the Privilege Manager for Sudo product. -
Lösung
Privilege Manager for Sudo provides powerful capabilities:Centralized management of sudo across any number of Unix/Linux serversCentralized reporting on sudo policy, activities, and historyEvent and keystroke loggingOffline policy evaluation and log synchronizationPolicy revision management with change tracking and reporting, and policy roll-backExtend Sudo 1.8.1Privilege Manager for Sudo enhances sudo with new capabilities (central policy server and keystroke logging)that embrace and extend sudo through the new Sudo Plugin which fits into the Sudo 1.8.1 modular architecture.Central Sudo PolicyPrivilege Manager for Sudo permits sudo to use a central service to enforce a policy, removing the need foradministrators to manage the deployment of the sudoers policy file on every system. This improves securityand reduces administrative effort by centrally administering sudo policy for privileged account managementacross any number of Unix/Linux servers.Centralized ManagementManagement Console for Unix provides a single management platform for sudo as well as additional Questsolutions, such as Quest Authentication Services and Privilege Manager for Sudo. It provides a single pointof administration for multiple Quest solutions to simplify administrator- and auditing-related activities acrossthe entire Unix/Linux environment.Centralized ReportingPrivilege Manager for Sudo includes Management Console for Unix which provides a single reporting platformfor sudo. Available reports include Access and Privilege Reports that analyze the sudo configuration file, aswell as user accounts and group memberships, and provides a list of the access and privileges that havebeen granted to users and systems through sudo. The solution also includes the ability to report on changesmade to the sudoers policy for policy groups through the console including versioning and the ability to revertto any previous version. This allows for a report that shows who made what changes to the sudoers policyfile, and when. It also includes the ability to report on who ran what sudo command across all managedsystems, and whether the command was accepted or rejected based on the policy.Event LoggingThe Privilege Manager for Sudo event logging feature provides the ability to log all commands performedthrough sudo to know which commands were accepted and rejected, who performed the command, andwhen the command was performed.Keystroke LoggingThe Privilege Manager for Sudo keystroke logging feature provides the ability to log keystrokes, then viewand replay keystroke logs for end-users that perform activities through sudo. The keystroke log provides acomprehensive view of what activities were performed and the commands that were executed across allsystems.You can filter the report in many ways to find data quickly. For example, you can filter on specificcommands or for commands run during a specific time period.Offline Policy Evaluation and Log SynchronizationPrivilege Manager for Sudo supports offline policy caching. When a Sudo Plugin host operates offline, itstores all log files on the host, then synchronizes the log data back to the primary policy server when itbecomes available. (See Privilege Manager for Sudo Policy Evaluation for more information.)Separation of Duty EnforcementThe Management Console for Unix enforces the concept of separation of duty (SoD) by adding the ability toassign users to roles within the console. Based on the role, a user is only permitted to perform certain tasks.For example, the administrator may be allowed to modify the sudo policy, but not to view keystroke logrecordings. -
Weitere Informationen
For addition information please read the PrivilegeManager_6.0_AdminGuide that comes with the product in the docs folder.