Overview Privileged Access Management

The exploitation of privileged, usually administrative, user accounts are very often at the heart of known cyber-attacks, as hackers and malware often seek to exploit privileged accounts as an entry point into your IT infrastructure. Eliminating admin rights and protecting privileged accounts has thus long been at the forefront of any risk mitigation strategy for organisations of all sizes. Compliance requirements and protection against insider attacks are also most effectively achieved by securing and managing administrative privileges.

Existing solutions in this area are often complex, inefficient in management, have too many functions, restrict employees and come with huge identity and access management consulting projects.

Made in Germany, amitego has focused since 2003 on developing an industry-independent portfolio in the area of Privileged Access Management (PAM), Remote Support and secure data transfer continuously. The amitego portfolio focuses on seamless documentation of internal and external privileged user activities and provides centralized control and visibility, as well as control over the privileged access rights of all accounts and users.

Advantages of the amitego cyber security portfolio

Protection against malicious attacks

The majority of all successful attacks are due to the deliberate exploitation of high, i.e. privileged, rights. Root-cause analyses of current cyber incidents show that so-called "privileged escalation", i.e. the maximum extension of administrative authorisations of certain users on desktops and servers, is often the gateway and thus bidirectionally also the non-closed exit for cyber criminals. Prevent the execution of malware by managing which applications are allowed to run in your environment, by which users and at what time. This technically prevents access outside your own set of rules.

Prevent insider attacks and data leakage

The principle of the smallest possible allocation of rights is the bottom line. Zero Trust is top notch. Immediately remove the administrator rights of all users, even those of the system administrators and root users in the data centre, and control the assignment of rights via groups or individually, linked to the respective application, process or internal organisational requirements.

Say goodbye to functional and anonymous accounts.

If each employee is only given the access rights they need to complete their tasks, these can normally be used for nothing else. In this way, both unintentional and intentional insider threats can be mitigated. On the other hand, functionalities such as session recording offer employees with increased rights the possibility to document their activities in critical areas or to their external service providers as proof of performance for work performed.

Adherence to compliance requirements and industry-specific security standards

amitego helps you to meet the strictest requirements in terms of verifiability of access controls and enforcement of the principle of least privilege as well as access management, thus also third party management. VISULOX supports organisations by centrally controlling privileged rights to meet compliance requirements. With the help of the VISULOX portfolio, flawless and audit-proven reports and evidence can be generated at the push of a button to demonstrate compliance with ISO 27001, NIST, TISAX, BSI-G KRITIS, HIPAA, PCI DSS, EU DS-GVO, BSI Grundschutz and many other standards.

The VISULOX portfolio: PAM, Remote Support and Data Transfer Control.
Cyber Security Solutions from a single source.

VISULOX Proof of Concept

For the entire amitego VISULOX portfolio, it is possible to test all functionalities within your own IT environment for 30 days.

Within 4 steps and 3 days we implement your VISULOX solution

All parts of the VISULOX portfolio can be implemented seamlessly during operation without any interruptions. The installation of VISULOX does not require any modification of clients or servers. From an IT security perspective, we do not touch your assets that need protection and do not install agents on endpoints.

VISULOX Privileged Access Management

Revoke privileges, defuse threats. Create a modern working environment and fend off attacks without affecting the productivity of your employees. Malware often enters the corporate network through accounts with elevated privileges. Therefore, the removal of high administrator rights is one of the most important strategies for companies that want to reduce their risk. VISULOX Privileged Access Management is modular and can be adapted to any requirement:

One central, documented access for all external users without exception.

VISULOX Remote Support

Who did what, when, where and how? All these are the core questions for the protection of critical assets, which are administered by external parties for remote maintenance. With VISULOX Remote Support you provide secure and documented access and Support for any device or system - always and everywhere.

VISULOX Remote Support pursues the goal of providing external users with the resources they need just-in-time and provides external users with access only when they need it. Based on groups or individually at least the following parameters can be defined:

• fixed periods of time, e.g. core working hours,
• permitted geo-locations, e.g. registered office of the service provider,
• shared IP addresses,
• Multi factor authentication,
• Specification of the Four Eyes Principle,
• Duty to visually document activities

VISULOX Remote Support does not make any demands on the end device and does not require any changes to the server or the clients.

• Deploy powerful Support
  Detached from operating systems, devices, platforms, industrial control equipment, administer remotely instantly and reliably. Provide immediate and reliable remote support to end users and customers running Windows, Mac, iOS, Linux or any other operating system on or off their network. Focus on solving problems instead of worrying about connectivity, so you get more done.
• Provide efficient service
  Improve service levels and increase customer satisfaction through seamless and high-quality remote support, as well as automated logging and traceability of activities performed, e.g. through session recording, for each end user. Offer scalable Remote Support for enterprise organisations without impacting operations. Whether you have a Linux server on the other side of the world or a Windows terminal server in maintenance in the local data centre.
• Protect your organization
  Support teams always need administrative rights to endpoints and full access to critical systems, such as SCADA systems, control centers or Active Directory servers, to do their job. The security of the remote access solution used for this purpose is critical to protect your network from threats and meet compliance requirements. VISULOX Remote Support guarantees that your organization's security zones will never be merged with those of the Support service provider. The latter will not have direct access to your internal systems. Multi-factor authentication, state of the art encryption, granular authorization assignments, comprehensive audit trails and much more, make VISULOX Remote Support the most secure remote maintenance software on the market, developed in Germany.

Transfer files. Integer, authentic and absolutely secure.

VISULOX Data Transfer Control

VISULOX Data Transfer Control works like the well-known security check at airports and scans every file to be transferred. Without exception, every data transfer - in or out - goes through this scan. VISULOX Data Transfer Control allows you to define fixed rules and thus control the entire data transfer . The connection is made from the application to VISULOX Data Transfer Control and only then to the server and vice versa, so that the security zones are maintained at all times.

In every organisation there are various requirements for secure data transfer. VISULOX Data Transfer Control VISULOX offers the possibility to easily and flexibly define rules on how, what and by whom data may be transferred to which destination and according to which criteria. At least the following parameters have to be defined:

• Authorised users and groups
• Source & destination of the files to be transferred
• Direction: in / out / bidirectional
• File size
• Name of the files
• Type of file or signature

In practice, this is done in a safe way:

An authorised user moves data into a specific "transit zone" using drag & drop. This is the core of VISULOX Data Transfer Control. Within this zone, the corresponding parameters are checked ad hoc and files are either released, forwarded or rejected directly. Each transfer generates an event that can trigger a further action if required.

To ensure that activities carried out can be traced at any time to fulfil audit requirements, for root cause analysis or for improvement purposes, all movements are archived via shadow copies in a verifiable and audit-proof manner. These files are never accessible to the operational administrators or users involved. 

Stored and archived, the information collected does not allow any direct conclusions to be drawn about transactions that have been carried out. Access to it is logged in the VISULOX Cockpit logged.

As a leading manufacturer, amitego has been offering protection for external privileged users and internal employees as well as the complete and traceable documentation of user activities and moved data with VISULOX since 2003. VISULOX is used worldwide by small to medium-sized companies, including DAX30 companies, across all industries.