SecurityManager

Security and Policy Management for Active Directory

Active Directory is critical to your overall network security. It allocates rights and protects systems and applications through highly integrated rules and policies shared enterprise wide. As such, it can also be the access point for malicious users to wreak havoc on your network, or the vehicle by which simple mistakes create gaping security holes. Likewise, because they contain confidential data, File Servers are also subject to security and compliance concerns and demand equal attention if they are to be protected 24x7.

NetPro’s SecurityManager ushers in a whole new breed of security for Active Directory and File Servers. Using a foundation of Microsoft Security Best Practices, SecurityManager is the only solution that empowers you to monitor enterprise-wide security policies in real-time, all from a single client. Providing both active and passive remediation, SecurityManager works 24x7 to ensure that critical Active Directory and File Server configurations are correctly defined, proactively reducing the risks of costly security breaches while enforcing corporate compliance at all times.

KEY FEATURES:

Enforce Security Best Practices

SecurityManager’s highly-scalable framework was developed using Microsoft’s best practices methodology for deploying and managing a secure Active Directory environment. For each step outlined by Microsoft, SecurityManager provides automated testing and enforcement of the associated best practices through enterprise-wide security policies.

Automate Regulatory Compliance Reports

Organisations are required by law to produce reports that demonstrate fulfillment of the government regulations to which they are subject. SecurityManager’s extensive best practices library includes more than 300 critical settings that are correlated against a comprehensive knowledge base of ISO, HIPAA and SOX standards to help you automate your compliance measurements and produce accurate, standardised reports quickly and easily.

Automate Remediation

When systems slip out of compliance with corporate configuration standards, SecurityManager not only reports on compliance lapses but also automatically returns the system to a safe state without costly manual intervention. You set the policies – SecurityManager does the rest of the work required to keep you secure. SecurityManager sets and enforces policies and conducts both active and passive remediation to prevent business-crippling security breaches.

Turnkey Change Management & Security

SecurityManager is the security behind NetPro’s collection of security and compliance sofware. The NetPro Security and Compliance Suite provides a total solution, protecting the infrastructure at all times through proactive infrastructure management, comprehensive, real-time auditing, and active security policy enforcement.

Cross-Forest Client Support

SecurityManager empowers network administrators with the ability to globally manage multiple forests from a single client, dramatically simplifying security policy enforcement for distributed networks. With cross-forest support, administrators have the option to connect to the Inspector Service or the database via the Forest, Global Catalog, Manual, or Database Direct connection options.

Scenario – Accidental Deletion of Exchange Server Container

A company recently outsourced its helpdesk functions, and there were a few junior administrators on staff. One of the administrators accidentally deleted a container in AD that included Exchange Server accounts, and the change caused an email disruption as well as a security breach in the system...

NetPro’s ChangeAuditor alerted the enterprise administrator of the deletions and highlighted the nature of the change and who made it, as well as where and when the unauthorized change took place. Once they recreated the deleted container and restored the computer accounts, the administrator decided to lock the critical objects, such as the container objects and service accounts, via SecurityManager’s Object locking policies. With these objects locked, the enterprise administrator prevented future accidental deletions and ensured that he would be alerted if someone tried to delete or modify the protected objects again. Without SecurityManager’s proactive policy enforcement and object-locking capability, the administrator would have remained open to future security breaches.