®

Safeguard forPrivileged Sessions
Reduce risk by controlling, monitoring
and recording privileged access

Introduction
Granting uncontrolled privileged access to internal
administrators, third-party vendors, contractors
and service providers can create significant risk.
This opens the door to attackers who hijack
privileged accounts and to rogue administrators.
The unfortunate – and expensive – impact of thistype of risk has been shown over and over again
by recent, highly-publicized incidents. To achieve
true security and compliance, you must do morethan simply control privileged user accounts.
You must monitor and record what they do withprivileged access.
With One Identity Safeguard for Privileged
Sessions, you can control, monitor and record
privileged sessions of administrators, remotevendors and other high-risk users. The recorded
sessions’ content is indexed to make searchingfor events simple and it also helps automate
reporting so you can easily meet your auditing andcompliance requirements.
Safeguard for Privileged Sessions also serves as aproxy, inspecting the protocol traffic on the applicationlevel. This inspection makes an effective shield against
attacks by rejecting all traffic that violates the protocol.
In transparent mode, minimal changes to your network
are required and users do not have to change theircurrent workflow or client applications, whichmakes implementation a breeze. However, workflow
rules can be configured to be more stringent,

Benefits• Mitigate the risk of a security breach bycontrolling access to sensitive IT assets• Easily meet compliance requirements
for monitoring privileged access• Get value faster with simple
deployment and management• Keep admins happy by enabling the useof familiar tools to administer systems• Maximize productivity with a small
learning curve and elegant UI design• Reduce efforts of audit reports with quick
access to all the information you need• Track access to any type ofsystems thanks to a hostindependent, agentless design• Accelerate incident response throughfast, full-text search in recorded sessions

including requiring prior user authorization, limiting
access to specific resources and receiving alerts ifconnections exceed preset time limits. Safeguard canalso monitor sessions in real time and execute variousactions: if a risky command or application appears,
One Identity Safeguard can send you an alert or
immediately terminate the session.

integrate directly with ticketing systems.
A password request can be automaticallyapproved or require any level of approvals.

SAFEGUARD FOR PRIVILEGED SESSIONS

MonitorRecordReplaySearchReportOptional Approval Workflow
Allowed
Suspicious
BlockedAdministrator

Target Resources
Real-time Alerts

SIEM

Record and monitor
all privileged accessWith full-text search, real-time alerting andblocking, Safeguard reduces your risk while making
it easier to meet compliance requirements.

Features
Full session audit, recording and replay
All session activity – down to the individual
keystroke, mouse movement and windows viewed– is captured, indexed and stored in tamperproof audit trails that can be viewed like a video
and searched like a database. Security teams cansearch for specific events across sessions and play
the recording starting from the exact location thesearch criteria identified. Audit trails are encrypted,
time stamped and cryptographically signed forforensics and compliance purposes.

Real-time alerting & blocking
Monitors traffic in real time and executes variousactions if a certain pattern appears in the commandline or on screen. Predefined patterns could be arisky command or text in a textoriented protocol ora suspicious window title in a graphical connection.
In the case of detecting a suspicious user action,
Safeguard can log the event, send an alert or
immediately terminate the session.

Two modes of operations
Choose which mode suits your needs.
• Workflow Engine – A workflow engine
that supports time restrictions, multiple
approvers, reviewers, emergency accessand expiration of policy. It also includes
the ability to input reason codes and/or• Instant On - Deploy in transparent modeso that no changes to user workflows arenecessary. It can act as a proxy gateway
operating like a router in the network – invisible
to the user and to the server. Admins cancontinue to use familiar client applications
and can access target servers and systems
without any disruption to their daily routine.

Proxy access
Since users have no direct access to resources, theenterprise is protected against unauthorized andunfettered access to sensitive data and systems.
Safeguard for Privileged Sessions can proxy
and record to many target resources, including
UNIX/Linux, Windows, network devices, firewalls,routers and more.

Command and application control
Safeguard for Privileged Sessions supports bothallow listing and deny listing of commands andwindows titles. Work the way you want. Even when
workflow is enabled, administrators can choose
their client, tooling and preferences when accessing
privileged sessions.

This creates a frictionless solutionthat gives administrators
the access they need while
meeting compliance andsecurity regulations.
Full-text searchWith its Optical Character Recognition (OCR)
engine, auditors can do full-text searches forboth commands and any text seen by the user
in the content of the sessions. It can even list
file operations and extract transferred files forreview. The ability to search session content andmetadata accelerates and simplifies forensics andIT troubleshooting.

2®

Auto-login
With the password injection functionality, accesscan be configured for auto login, which enhances
security and compliance by never exposing thepassword to the user. Wide protocol support Fullsupport for SSH, Telnet, RDP, HTTP(s), ICA andVNC protocols. In addition, security teams candecide which network services (e.g. file transfer,shell access, etc.) within the protocols they want toenable/disable for administrators.

Instant off
By acting as a virtual firewall, One Identity
Safeguard increases protection of your servers byterminating questionable or malicious accesses
nearly instantly. In addition, to avoid accidental
misconfiguration and other human errors, thesolution supports the four eyes authorization
principle under which the monitoring admin canterminate the session at any time.

Drop in deployment
With a rapid appliance-based deployment andsimplified traffic rerouting, One Identity Safeguard
can have you recording sessions in a matter of days
without disrupting your users.

Analytics readyCollect all the information you need to analyze
privileged users and behavior and detect internaland external threats.

Secure access to legacy systems
Use smartcard, 2FA or other strong authentication
methods to gain secure access to systems. Because
Safeguard acts as a proxy gateway to the system, itenables strong authentication to targets that cannot
or do not support those methods automatically.

The One Identity approach toPrivileged Access Management
The One Identity portfolio includes the industry’s
most comprehensive set of Privileged Access
Management solutions. You can build on thepowerful session management functionalityof Safeguard for Privileged Sessions with ourprivileged password safe and privileged analytics
solutions. Our product offering includes solutions
for granular delegation of the UNIX root accountand the Active Directory administrator account,add-ons to make open source sudo enterprise
ready; and keystroke logging for UNIX root
activities – all tightly integrated with the industry’s
leading Active Directory bridge solution.

About One Identity
One Identity delivers comprehensive cloud andon-premises identity security solutions that help
customers strengthen their overall cybersecurity
posture and protect the people, applications anddata essential to their business. Our Unified Identity
Platform brings together best-in-class identity
governance and administration (IGA), accessmanagement (AM), privileged access management(PAM) and Active Directory management (ADMgmt) capabilities. This holistic approach enables
organizations to increase the visibility, control
and protection over all their identities. Proven andtrusted on a global scale, One Identity manages
more than 500 million identities for more than
11,000 organizations worldwide. For more
information, visit www.oneidentity.com.

© 2024 One Identity LLC ALL RIGHTS RESERVED. One Identity, and the One Identity logo are trademarks and registered trademarks of One Identity LLC in the U.S.A. and other countries. For a complete list of One Identity trademarks,
please visit our website at www.oneidentity.com/legal. All other trademarks, servicemarks, registered trademarks, andregistered servicemarks are the property of their respective owners. Datasheet-Safeguard-Privileged-Sessions-93120®