Privileged account traceability Insider threat management

Wallix AdminBastion tracks all connections and actions by privileged users on administered devices: business applications, databases, hypervisors, Windows & Unix/Linux servers, network devices, etc. Via WAB’s audit console, you can view connection logs and monitor sessions in real time.

Windows Terminal Server (RDP) or VNC graphic sessions on managed devices can be recorded in video format, and activities performed during command-line sessions (SSH, Telnet, etc.) can be recorded in text file format. Wallix AdminBastion’s Optical Character Recognition (OCR) engine analyses all Windows and VNC graphical sessions, providing a simple means of finding the source of incidents, failures and wrongdoing.

Wallix AdminBastion provides standard reports on global WAB activity (connection logs, number of connections, user rankings, etc.). Wallix’s WAB Report Manager (WRM) add-on solution can be used to create custom statistical and alert reports according to your needs and your business or audit requirements.

WAB includes a password management system that can be used to automatically or manually change the privileged account passwords of administered devices (Windows & Unix/Linux servers and Cisco hardware). It provides secure access to the modified passwords in the event of a major security incident.

Wallix AdminBastion examines all commands entered during SSH sessions in real time, creating an alert or even terminating the connection if it detects a prohibited string. Wallix AdminBastion’s OCR engine analyses all RDP and VNC sessions in real time so that an alert is sent when the WAB detects any inappropriate behaviour.

Simple yet powerful rules give you full control over access to devices and applications, using criteria such as the IP address, user name, time frames, protocol, etc.