MasterSAM PMS
“I am responsible to manage close to 1000 UNIX servers across regional offices. Managing SUDO policies is always my major challenge and everyday users complain about inconsistency of policies. After using MasterSAM PMS, I have full visibility of my SUDO policies at a single management dashboard, I know exactly which policy applied to who and where, change of policy and enforcement control are just few clicks away.”
- Regional Senior Security Administrator, headquarter of a multinational company
MasterSAM PMS
With host based deployment model, it is essential to have a centralised management solution for operational efficiency. MasterSAM Privileged Management System (PMS) provides the centralised management solution to bridge the communication with the following MasterSAM host based solution and improve the turnaround time of the needs to manage each server locally.
- • Single management console for MasterSAM host based deployment model
- • Leverage organization’s existing Active Directory/LDAP infrastructure for user authentication
- • Provide simple matrix to ease configuration
- • One-click button to publish mass policies with immediate enforcement control
- • Provide built in workflow to ensure each privileged access is authorized according to organization’s policy
- • Support sequential or parallel workflow, up to 3 levels
- • Automated privilege assignment & demotion according to the authorized duration
- • Discover super user privilege that exists on organization’s serversl
- • Manage super user privilege by restricting who can access the servers
- • Provide capability to allow user mapping between Active Directory user and local user at Unix/Linux environment
- • Support temporary user account provisioning/de-provisioning at Windows workgroup and Unix/Linux environment to facilitate privilege escalation
- • Centralised tool to manage UNIX SUDO policies
- • One-click button to publish mass policies with immediate enforcement control
- • Scan and detect privileged accounts such as UID=0, accounts under the membership of Administrator, etc.
- • Detect and report dormant accounts with their associated services
- • Allow profiling of baseline policies prior to scanning
- • Provide intuitive & graphical compliance dashboard with details breakdown
- • Support file integrity & process lifecycle check
- • Support network drive mapping or shared folder integrity check
