Kidan - ManageEngine Access Manager Plus

Overview

An exclusive privileged session management solution for enterprises

For businesses to be productive, it's important to enable privileged access to critical systems to the right employees, regardless of their location and the time of day they require access. But providing remote privileged users with such access presents huge security and privacy challenges, and legacy solutions like VPNs are often inflexible and simply don't cut it anymore.

What modern enterprises need is a solution that enables direct access to every component in the infrastructure spread across the public and private clouds, while ensuring granular access controls, monitoring and recording all actions, and providing real-time control over every privileged session.

ManageEngine Access Manager Plus is a web-based privileged session management software for regulating access to remote systems through secure channels from a unified console. With comprehensive auditing capabilities, it offers total visibility into all privileged access use and lets enterprises manage privileged user sessions in real time, shutting the door on privilege misuse.

What You Can Expect

The Access Manager Plus is capable of:

RemoteApp for Windows, remote file transfer, and jump servers for Windows and Linux to ease data center access.

Secure RDP, SSH, SQl, VNC remote connections.

Logs privileged session activities in audit trails.

Monitors and records privileged sessions, and allows administrators to terminate an anomalous session to prevent misuse.

Compliance with various regulations like HIPAA, PCI, GDPR, NERC-CIP, etc.

provide real-time control over every remote session.

Some Perks

Access Manager Plus Business benefits

Reduced attack surface

Enhanced regulatory compliance

Improved and easy administration

Tighter overall access governance

Increased productivity for privileged users

Some Features

Typical remote access use cases addressed by Access Manager Plus

Data center access

Data center access for server, network, application, database, and security administrators requiring (RDP), VNC, SQL, and Secure Shell (SSH) connections to data center resources across on-premises, cloud, and hybrid environments from a single console.

Collaborative session settings

Collaborative session settings for administrators to join an ongoing remote session with a single click for brainstorming, and also offer assistance to users while monitoring their activities during troubleshooting sessions.

Privileged access to (OT)

Privileged access to operational technology (OT) endpoints in the manufacturing process from any remote device or location, including production sites, for security experts to monitor and control geographically distributed assets.

Remote work facilities

Remote work facilities for the entire workforce by enabling privileged access to sensitive corporate systems through secure RDP and SSH sessions. Granular access controls for enterprise system administrators to provide privileges to access the required folders & applications.

Privileged session monitoring

Privileged session monitoring to promote organizational transparency and provide IT administrators with the ability to view and, if necessary, interrupt and terminate an active privileged session.

Secure remote access

Secure remote access for medical professionals to healthcare systems, like hospital information systems (HIS), picture archiving and communication systems (PACS) and patient monitoring systems, for remote diagnostics and maintenance services.

Remote access to (ICS)

Remote access to industrial control systems (ICS) for technicians, maintenance engineers, & plant operators to connect to critical servers located in various automation systems, like PLCs, SCADA, HMIs, etc. through RDP & SSH jump servers, enabling them to conduct tasks.

Secure file transfer

Secure file transfer capabilities during a remote session that enables privileged users to transfer files between a remote system and the local host or between two remote systems, as well as upload or download files on the remote device.

Access for third parties

Temporary, role-based access for third parties, like contractors, outsourced employees, to access specific enterprise systems or applications without the need for privileged credentials. Create custom roles for them with just the right access to conduct their tasks, while monitoring their activities.

Streamlined RDP sessions

Streamlined RDP sessions that allow users to connect to specific Windows applications configured as RemoteApps in the target systems, instead of the entire remote desktop.

Editions

Access Manager Plus is available in Standard Edition

Standard Edition

From US $495

Central control
Solid authentication system
Effective user management
Access control workflow
Help desk integration
Data center remote access
One-click remote sessions
RemoteApp support
Bi-directional remote file transfer
Privileged session recording
Live monitoring and collaboration
In-depth audit trails

FAQ's

Frequently Asked Questions

Why Access Manager Plus?

Access Manager Plus is a constructive platform to achieve secure remote access management and session governance. It allows to establish privileged sessions to underlying systems (Windows and Linux) via a centralized console; monitor, join, record, or terminate sessions effectively.

It allows users to define roles for users and grant required privileges or access rights for those roles. It also allows distributing the user information and access grants to all devices and systems that enforce access rights. Furthermore, it let monitoring and assessing the privileged users’ activities to detect anomalies.

Overall, Access Manager Plus provides real-time monitoring and control of all privileged users’ access and sessions to counteract malicious activities.

What is a Privileged Session?

Unlike most sessions that normal unprivileged users run, there are sessions driven by privileged user accounts, called privileged sessions. IT infrastructure, application servers, and many other secure online resources require such sessions. Such privileged user accounts may belong to system administrators, developers, application owners, and other users and processes that operate with system elevated privileges to perform sensitive operations.

Is it possible to synchronize Access Manager Plus with Active Directory?

Access Manager Plus allows configuring auto-synchronization with Active Directory (AD) for a specific group or OU of an AD domain. This will ensure that the Access Manager Plus user database is always in sync with the AD user database.

To set up a synchronization schedule, enter a time interval while importing users from AD. Once the schedule is set, Access Manager Plus will query the Active Directory at the specified intervals to keep the user database updated. The time interval could be as low as a minute or in the range of hours/days.

Click here to learn how to import users from Active Directory.

Is backup feature included in Access Manager Plus?

Data stored in Access Manager Plus is of critical importance. In any production environment, there would be constant requirements for backing up the data, either for reference purposes or disaster recovery. To achieve this, Access Manager Plus provides database backup for PostgreSQL and MS SQL. Through this, users can schedule tasks to back up the database contents periodically. For MS SQL, the backup will be stored as a .zip file by default in the host, where the SQL server is running. All the sensitive data will remain encrypted in that file. Access Manager Plus also offers a data recovery mechanism for both databases.

Access Manager Plus offers two types of backup: Scheduled backup and Instant backup.

Is Access Manager Plus Free?

Yes, Access Manager Plus is available for free up to 2 users.
Access Manager Plus licensing is based on two factors:

The number of connections — The maximum number of connections to remote systems via Access Manager Plus at a given point in time.
Type of edition — Free or Standard

How do I install Access Manager Plus?

Being the Swiss Partner of ManageEngine, Kidan is responsible for aiding with professional services, such as installing, implementing, configuring, training, and supporting the company to ensure an effective on-boarding of Access Manager Plus!

To make it even better, Kidan even provides advice on top of it all!

Get in touch with us to know more

Want to continue the conversation?

Thank you for your interest in ManageEngine's Access Manager Plus solution. Please fill out the form below to ask a question or request assistance.

Features

Features of Access Manager Plus

Key Features & Capabilities

Help desk integration

Reinforce access approval workflows for remote connections by incorporating ticket ID validation. Authorize users and third parties only upon ticket status verification.

Central control

Define how users bind to endpoints and provide central control over access routes. Switch between remote sessions simultaneously and control them all from one console.

Authentication system

Allow users & third parties to auto log in using authentication services such as AD, LDAP, & Azure AD. Using 2-factor authentication to improve protection even more.

Remote support

Integrate specific Windows-based remote applications into the local desktop, allowing users and third parties to access applications installed in the remote server locally.

Session recording

Record every privileged user session and store them as video files in an AES-256 encrypted database for post-session review and support forensic investigations.

Remote file transfer

Transfer files between remote system & local host or between two remote systems & uploads or download files on the remote device, using secure protocols like SCP and SFTP.

DC Remote access

Embrace simplified and direct connections to remote Data Centers and automatically authenticate via jump box support for Windows and Linux platforms.

In-depth audit

Capture every facet of a user session as context-rich logs, and instantly send SNMP traps and Syslog messages to your SIEM tools to support compliance audits.

User management

Enhance user onboarding by automatically importing user groups from AD, LDAP, and Azure AD. Create custom user roles from scratch with fine-grain access scopes.

Remote sessions

Enable users to launch tunneled RDP, SSH, SQL, and VNC connections to remote hosts via encrypted gateways. Leverage session-specific settings for an enhanced remote connection.

Live monitoring

Shadow user sessions & achieve dual control. Terminate anomalous sessions instantly, & revoke access to prevent misuse & see collaboration.

Control workflow

Establish a request-release mechanism that allows scrutinizing access requests before approval. Grant users and contractors granular access to remote systems.