Xceedium - Privileged User Management in the AWS Cloud

Zero TrustPrivileged Identity and Access Management Platform XsuiteTM

Introduction • Security software company providing Best Overall IT Company 2011 Privileged Access Control Solutions RSA 2011 Hot New • Global Fortune 1000 and Government Security Product customer base Cool Vendor • Privately held - Headquartered in Herndon, VA Best Network Security • Single Platform – XsuiteTM Hot Company to Watch Top 100 Global Company FIPS 140-2, Level-2 Common Criteria EAL 4+ UC/Approved Prod. List2

Our Customers Include… Commercial Federal  Top 5 Global Bank  Top 3 Telecommunications Company  Fortune 10 Financial Services Company  Top 5 Global Retailer  Multiple Global Stock Exchanges  Fortune 200 Food Products Company  Top 3 Online Broker  Top 3 Smart Phone Provider  Top 3 Food and Drug Retailer3

Privileged Identity and AccessManagement for Federal • DOD CIO Instruction 8520.03 • Administrative accounts shall not be accessed from an untrusted or user managed environments • Administrative accounts, both partner and DoD must utilize level 4 credential • 2011 FISMA report • Privileged access identified by IG as the area in most need of improvement • Use of risky shared accounts and no identified policy • NIST 800-53 • Privileged users require a broad set of security controls: AC, AU, CA, CM, IA, MA, etc…

Evolving Credential ManagementChallenge • HSPD-12 • Presidential directive to establish trusted identity for physical and logical access • OMB-11-11 requires 2013 IT budget submission to address logical PIV integration • FICAM chaired by CIOs develops common framework and maintains roadmap • FY2012 Presidential IT Budget Priority • NIST 800.63 • Electronic authentication mechanism guide includes Levels 1 to 4 • FIPS 201-2 • Personal Identity Verification (PIV) of federal employees and contractors • X.509 based Federated PKI • Revised draft addresses mobility

Setting Priority Within aFramework • ICAM roadmap guidance for Privileged Users • Agencies shall use high assurance credentials for administrative users • Level 4 Personal Identification Verification (PIV) card • Smart cards with embedded PKI Certificate • Commonly referred to in DOD as CAC (Common Access Card) • Minimize use of password and tokens for all administration • Agencies should eliminate duplicative infrastructure to reduce or eliminate the costs associated with expired/forgotten passwords • Eliminate application-specific password tokens • Enabled application to accept the PIV card for federal employees and contractors

Align with Executive Priorities • IT Reform • OMB mandates coordinated through the CIO Council • 25 Point execution plan • FDCCI (Federal Data Center Consolidation Initiative) • CIO counsel program aligned with OMB requirements • Must report FY progress • Four primary goals • Reduce costs • Increase security • Increase efficiency • Reduce energy consumption • Cloud Computing Strategy “Cloud First” • Efficiency, agility and innovation • Accelerate FDCCI • FEDRAMP

Xceedium New EnterpriseSolution

Problems We Solve… • Eliminate • Risk of privileged access through anonymous shared accounts • Expense of redundant administrative access solutions • Complication of ineffective homegrown solutions • Enable • Enterprise PIV Level 4 credential for privileged access • Centralized policy management and compliance reporting for privileged users • “New Enterprise” support for legacy IT, data center, private and public cloud • Move Forward • Rapid deployment • OMB Mandated compliance, DoD policy, and FISMA required security controls • Supports emerging Continuous Monitoring requirements

Department of Homeland Security Problem: Consolidate & grant secure access to geographically dispersed data centers • centralize access control across agencies with distinct missions • ensure contained and auditable access • meet federal compliance requirements (FDCC/FISMA) Results: Control over privileged users and critical infrastructure and assets • tight control over who gets access to what, when and for how long • contain users from the 21 component agencies to authorized systems only • audit quality logging for compliance “With Xceedium GateKeeper we have an all-in-one solution for these higher risk users which gives us the peace of mind that we are meeting our objectives to safeguard our network and the sensitive information it contains.” Security Expert at DHS10

Use Case- DHS -IT Admins -Elevated Risk -Applications• Single point for management and cloud entry • Continuous Monitoring• PIV-to-Shared identity resolution (OMB-11-11) • LDAP/AD component support• Security Controls (NIST 800-53) • Virtual private cloud management network

Xceedium Unveils Xsuite Cloud For Amazon Web Services AWS Security Solution Provider Delivers Comprehensive Privileged Identity and Access Management Solution for the New Enterprise12

Privileged Identity & Access Management for the NewEnterprise Traditional Data Center Private Cloud Public Cloud Virtual Management Console AWS Management Console • Single Scalable Platform • Comprehensive Zero Trust Controls • Unified Policy Management13

Two Form Factors Public Cloud Traditional Data Center Private Cloud Traditional Data Center Private Cloud Virtual Management Console AWS Management Console Virtual Management Console Public Cloud Physical Appliance Amazon Machine Image (AMI)14

Security Across AWS Regions& AWS Management Console AWS Regions GOV CloudAdmin Accounts AWS Classic Cloud AWS Management ConsoleMaster AWS Admin Account

Tight Integration, Public Sector ReadyIntegration: • Via AWS SDKs/AWS APIs • Integration with AWS Management Console (via API) • AWS Identity and Access Management (via API) • Support for AWS VPC • AMI based solution option • AWS S3-based storage option for Xsuite log-files and session recordingsPublic Sector Ready: • FIPS compliant • PIV/CAC smart card authentication across enterprise systems, AWS Management Console, EC2 Instances, • AWS GovCloud Support

Click to watch a brief video about Xceedium17

Contact Us 2214 Rock Hill Road, Suite 100 Herndon, VA 20170 Phone: 866-636-5803 Email: info@xceedium.com Twitter: @Xceedium Facebook: www.facebook.com/xceedium18

Xceedium - Privileged User Management in the AWS Cloud

by Amazon Web Services on Aug 07, 2012

Accessibility

Categories

Upload Details

Usage Rights

1 Embed 2

Statistics

Xceedium - Privileged User Management in the AWS Cloud Presentation Transcript