Quest One Privilege Manager for Sudo

• Extend Sudo 1.8.1 – Enhance sudo with new capabilities that embrace and extend sudo by providing plug-ins (central policy server and keystroke logging) that fit into the sudo 1.8 modular framework.
• Central Sudo Policy – Use a central service to enforce policy, removing the need for administrators to manage the deployment of sudoers on every system. This improves security and reduces administrative effort by centrally administering sudo and sudo policy for privileged account management across any number of Unix/Linux servers.
• Centralized Reporting – Centralize reporting on sudo using a single platform: the Quest One Management Console for Unix. Available reports include access and privilege reports that analyze the sudo configuration file, user accounts and group memberships. Reports also provide a list of the access and privileges that have been granted to users and systems through sudo. The console also lets you track changes made to sudoers, including versioning, and the ability to revert to any previous version. This allows for a report that shows you who made what changes to the sudo policy file, and when. It also includes the ability to track who ran what sudo command across all managed systems, and whether the command was accepted or rejected based on the policy.
• No Training Required – Avoid training and minimize calls to the help desk. Because plug-ins extend sudo’s capabilities, users will take advantage of their existing sudo knowledge and realize a faster time-to-value. Other privileged management solutions require learning new commands and syntax, resulting in more training and calls to the help desk.
• Keystroke logging – Track and log keystrokes for administrators that perform activities through sudo using the Privilege Manager for Sudo Keystroke Logging plug-in. The keystroke log provides a comprehensive view of what activities are performed and the commands that are executed across all systems. The report can be filtered in many ways to help you quickly find the data you need. For example, you can filter on specific commands or for commands run during a specific time period.
• Separation of Duty Enforcement – Enforce the concept of separation of duty (SoD) using the Quest One Management Console for Unix. The console enables users to be assigned to a role, and based on the role, only be allowed permissions to perform certain tasks. For example, the administrator may be allowed to modify the sudo policy, but not be allowed to view keystroke log recordings.
• Sudo Offline Policy Cache – Provide continuity of service in the event of a network or server outage with Sudo Offline Policy Cache.
• Script Compatibility – Ensure compatibility with existing script files that include embedded sudo commands. Because other privileged management solutions use different commands and syntax, existing scripts will likely fail to run, resulting in potentially huge costs to test and fix scripts across multiple Unix systems.
• Centralized Management – Manage sudo using the Quest One Management Console for Unix, as well as additional Quest solutions, such as Authentication Services. The console provides a single point of administration for multiple Quest solutions to simplify administrator- and auditing-related activities across the entire Unix environment.

The Privilege Manager for Sudo plug-ins require sudo 1.8.1 or later and will run on the following systems that have sudo installed.

The Management Console for Unix is browser-agnostic (supporting Internet Explorer, Firefox or Safari) and can be run from any Windows, Mac, Unix or Linux workstation.

Quest One Privilege Manager for Sudo Overview Video

• Quest One Privilege Manager for Sudo Overview Video

  Privilege Manager for Sudo helps Unix/Linux organizations take privileged account management through sudo to the next level. Watch this video to see how you can enhance sudo with a centralized policy server for sudoers and quick and easy access control reporting.

  Watch the Video »

• Quest One Privileged Password Manager Product Overview
  

  Learn about Quest One Privileged Password Manager, Quest Software’s solution for complete password management control in Windows 2000, 2003, 2008 and Active Directory environments and connected systems.

  Watch the video »

• How to Grant Firecall Access using Quest One Privileged Password Manager
  

  Learn how to grant firecall access using Quest One Privileged Password Manager, Quest Software’s solution for password management control in Windows and Active Directory environments and connected systems.

  Watch the video »

• How to Provide Pre-Approved Access with Quest One Privileged Password Manager
  

  Learn how to provide pre-approved, time-limited access using Quest One Privileged Password Manager, Quest Software’s solution for password management control in Windows, Active Directory and connected systems.

  Watch the video »

• How to Provide Access to Windows Systems with Quest One Privileged Session Manager
  

  Learn how to access Windows systems using Quest One Privileged Session Manager, Quest Software’s solution for high-risk user session control, proxy, audit, recording and replay.

  Watch the video »

• How to Provide Access to PCI Resources with Quest One Privileged Session Manager

  Learn how to provide access to PCI resources with Quest One Distributed Processing Appliances and Quest One Privileged Session Manager, Quest Software’s solution for session control, audit, and record/replay.

  Watch the video »

• Replace Hard-Coded Passwords with API Calls using Quest One Privileged Password Manager
  

  Learn how to replace passwords hard-coded in applications and scripts with API calls using Quest One Privileged Session Manager, Quest Software’s solution for comprehensive password management control.

  Watch the video »