ManageEngine launches Privileged Password Management software for MSPs

ManageEngine, the real-time IT management company, has announced the immediate Beta availability of MSP Edition of its Privileged Password Management Software Password Manager Pro. The company offers an advanced look of the industry-first solution, developed specifically to address the unique privileged identity management challenges faced by Managed Service Providers (MSPs), at stand #C40 at Infosecurity Europe, at Earls Court, London, UK between April 23-25, 2013.

Password Manager Pro MSP Edition allows MSPs to centrally manage the privileged passwords of their clients through a fully automated and policy-driven approach. This ensures MSPs are able to offer critical data protection above and beyond the client’s best practice security guidelines for sensitive information and also helps MSPs demonstrate to their customers that sensitive data is being securely handled.

MSPs, in particular those managing the IT and Network infrastructure of their clients are swamped by the ever-increasing number of privileged passwords. Without appropriate management tools this can lead to a haphazard style of password management where the administrative passwords, which grant unlimited access privileges on the IT assets are stored in plain-text in volatile sources like excel sheets, print-outs and text documents; insecurely shared among technicians without relevant protection, leaving the client organisations open to security attacks.

“Identity theft often lies at the root of modern-day cyber-attacks. Cyber-criminals are increasingly targeting login credentials of employees and administrative passwords of IT resources through various techniques. Since MSPs manage the IT infrastructure for many clients, the risk level is very high and they are looking for a secure and reliable solution for privileged password management.” said Rajesh Ganesan, director of product management at ManageEngine.

“While there are many good enterprise-class privileged password management solutions on the market, they do not cater to the specific needs of MSPs. The ManageEngine Password Manager Pro MSP Edition bridges this crucial gap by offering an easy to implement yet affordable password management solution that provides effective security protection to both the service provider and all its customers.”

The new edition enables MSPs to manage the passwords of each of their clients separately from a single management console. Passwords can be securely shared between MSP administrators and their respective customers, making sure that users only get access to the passwords they own or are shared with. The solution offers the flexibility to entrust the control of the password vault to the MSP administrator, the end user or both as desired. The IT policy of the respective organisation can be enforced through automated password resets.

In addition, users requiring access to passwords can be enforced to go through password request-release workflow resulting in tighter access controls. All activities with respect to password access are audited and reports can be generated on ‘who’ accessed ‘what’ passwords ‘when’. When a technician at the MSP-end leaves the organisation, all passwords accessed by the technician can be automatically changed on remote resources, easily eliminating the chances of potential misuse in future.

The MSP edition also features all the security measures of the existing ManageEngine Password Manager Pro Premium Edition.

Other Highlights
Mobile Access - Secure retrieval of privileged passwords and approval of access requests on the go from mobile phones
AD/LDAP Integration - Users or user groups can be imported from Windows Active Directory or LDAP from the customer network and the authentication mechanism leveraged
First-in-class remote login - MSPs can launch highly secure, reliable and completely emulated Windows RDP, SSH and Telnet sessions from browser without any plug-in or agent software
Privileged Session Recording - Privileged sessions launched from the product can be video recorded, archived and played back for forensic audits
Real-time Alerts - Real-time alerts on the occurrence of various password events enabling integration with Security Information and Event Management (SIEM) solutions
High Availability Architecture - Uninterrupted access to enterprise passwords through the deployment of redundant server and database instances.