Streamlining access management and improving session monitoring
A Marine Vessel Operator Secures Remote Access for Diagnostics, Maintenance and IoT Data Collection
Customer
The customer is one of the largest Japanese multinational companies specializing in information and communication technology (ICT). It offers a wide range of services, including IT solutions, consulting, and managed services, as well as hardware products like servers, storage systems, and computing devices.
Challenge - Limited visibility, auditing and sessions recording for sessions
A security breach was detected in the customer’s network, but they did not have any solution at the time that could provide detailed access login information about the incident.
The customer needed details to see who logged into the system, when did they log in, and what actions were taken. They were using an open-source directory management programme which does not include security audits or session recording features.
Solution - Centralized, audited and modern PAM
After the security incident, the customer recognized the need for a centralized PAM solution to enhance their privileged access security. Full end-to-end auditing is one of the key features that the customer was looking for. They required the solution to record access traffic and create full audit logs.
They were also looking to streamline the access requests and approval workflow. As a large company, the customer manages thousands of connections and access requests coming from employees, third-party vendors, and partners.
Based on these requirements, the customer selected PrivX for their secure privileged access management (PAM) solution.
Complete audit trail
Audit records of admin access, including session recording and live session monitoring if needed. Logs can be automatically directed to SIEM.
Streamlined approval workflows
Quicker and easier approval workflow, reducing the amount of manual work required for secure access management.
Auditing, tracking and recording
Centralized access under a single pane of glass – including on-premises servers, multicloud hosts, network devices, or web applications and management consoles.
Just Enough Access
Pprivileged users only get to see and access their available targets to align with Just Enough Access (JEA) principles.
Compliance
The customer can demonstrate compliance with detailed audit trails of activity.
Zero Trust and passwordless
Each session is verified each time it's made to align with Zero Trust but users don't need to remember passwords with passwordless login.
