ManageEngine Launches PAM360 for Enterprise Privileged Access Security

ManageEngine, the IT management arm of Zoho Corporation, has released PAM360, a privileged access security product for IT security teams that the company describes as complete. It went on sale immediately.

PAM360 brings enterprise-grade privileged access governance, including just-in-time controls and privileged user behaviour analytics (PUBA). The aim, according to ManageEngine, is to give CISOs and other security leaders a full view of how privileged access is handled across their organisation.

Why privileged accounts need closer watching

Keeping track of and controlling access to privileged accounts is central to enterprise security. Forrester estimates that stolen or misused privileged credentials are involved in at least 80 percent of data breaches. As cloud and mobile technology push the security perimeter outward, older privileged access management (PAM) tools find it harder to keep attackers out.

ManageEngine argues that organisations increasingly need to correlate privileged access data closely with system logs, analytics and other IT management platforms, so that they can draw useful conclusions and fix problems faster. A 360-degree approach to privileged access security, in the company's view, supplies that correlation and the visibility enterprises need to stay ahead, close off threat vectors and remain compliant.

Rajesh Ganesan, a vice president at ManageEngine, said enterprises are more and more aware that privileged access security matters, but frequently do not know how to set up and operate a full PAM programme. A gap in either processes or tools, he warned, can derail the entire programme and leave it dysfunctional. With PAM360, he said, the company is taking a holistic view of PAM and of how it fits into wider operations, so that customers can roll out privileged access security across all of their infrastructure.

What PAM360 includes

The product is built around running extended workflows from one central console and tying privileged access data more closely to the other parts of enterprise IT. Its main enterprise features are:

• Privileged account governance. Privileged access policies for every category of user are enforced centrally. Access to critical assets is regulated, and all privileged access that follows is monitored and audited from a single console.
• Just-in-time privilege elevation. Domain accounts can be given elevated privileges on demand for a set period. Complex access management workflows are coordinated from the same console.
• Privileged session monitoring. Privileged sessions are recorded on video, and dual controls are possible because sessions can be shadowed and terminated in real time.
• Privileged user behaviour analytics. Correlating privileged access data with endpoint event logs establishes normal behaviour and flags anomalies in privileged account activity. Quick access to advanced analytics on privileged access speeds up remediation.
• SSL/TLS certificate management. SSL certificate life cycles are managed from start to finish to protect a brand's online reputation, using ready-made integrations with public certificate authorities including DigiCert, Let's Encrypt and GoDaddy.