| |
Home > Products > In Focus
|
InFocus: Identity and Access Management
Enabling your Business, Disabling Unauthorized Users
Efficient access management helps align information security strategies with overall business objectives. Ideally, each individual has smooth role-based access to all the relevant resources on his or her "need-to-know"-horizon, preferably translated into fast access and single sign-on provided on the level of "what I need to know to get my job done efficiently without violating business rules".
FoxT Enterprise Access Controls Management provide an organization with centralized management where business rules are translated into access rules adapted to the existing IT infrastructure. Authorized users receive fast access to the resources they need through single sign-on while robust access control enforce restrictions and block unauthorized usage. Furthermore, centralized audit logs allow monitoring and verification that the controls are efficient while encryption of data in transit secures confidentiality and integrity.
However, identity and access management first and foremost is about processes. How does HR register a new employee? What is the workflow to manage a request for a user account in a given system? Or even more important - how does it get deleted when an employee leaves the company or changes roles within the organization? These are critical processes, and technology solutions can only support, not replace these processes.
Integrating with Existing Identity Management
To support real-world scenarios as efficiently and flexibly as possible, FoxT Enterprise Access Controls Management integrates with existing meta-directories, LDAP, or Active Directory repositories if already used for identity management workflows. The various FoxT BoKS solutions for Desktops, Applications and Servers respectively add a separate layer of dedicated access management and auditing capabilities within an existing infrastructure.
Introducing Access Routes and Authenticators
The three FoxT BoKS solutions share a common multi-service security server through which some important new concepts are provided, such as Access Routes and Authenticators. An Access Route is a defined path from one computer or network segment to another computer or segment with specified time constraints for a given access method. In a system locked down by FoxT Enterprise Access Controls Management, only explicitly allowed Access Routes remain available. More or less strict requirements on the authenticator can be defined as well when a user is accessing resources using a given route.
- Is a password enough for login to a specific application or server?
- Or do we require tokens for two-factor authentication?
- Or possibly smart cards and x.509 certificate-based authentication?
- Can I access this server using telnet?
- Or do I have to use SSH and smart card authentication?
- Can I access this server after office hours?
The FoxT Enterprise Access Controls Management security server will have the answer to questions like these, translated into policies which then will be enforced throughout the organization.
Virtual Network Segmentation for In-Depth Defense Strategies
Combined BoKS FoxT ServerControl, BoKS Access Control for Desktops, and FoxT ApplicationControl allow an organization to achieve efficient segmentation of the network providing a whole new set of in-depth defense lines to strengthen security and comply with auditor requirements.
Overcoming the Password-Trauma
While FoxT Enterprise Access Controls Management introduces such techniques for user and role-aware access controls to applications and servers, the end-user experience is improved usability. The FoxT client on the desktop keeps track of user credentials enabling single sign-on to protected resources. As a result, security improvements are achieved along with productivity enhancements. No more frustration due to strict password policies; security ceases to be a burden to end-users once the easy way and the short-cuts turn out to be the safe and proper ways to get the job done.
|
|
|
