Search, View and Navigation

 

ForestSafe delivers highly scalable policy based access to key IT systems. It provides automated policy based control of local and central account passwords across servers, workstations, network devices and other key services including all of the following:

• Windows Domain/Workgroup/IIS/Service/Registry
• Unix platforms (Linux/AIX..) devices supporting SSH or Telnet
• MSSQL/Oracle/DB2 and SybaseMQSeries/CISCO and LDAP
• WebLogic/WebSphere/Domino/JBoss and Exchange

ForestSafe improves on many traditional password storage systems by removing the need to store encrypted passwords, instead all passwords are only generated when needed using a predictive encrypted password generator.

EESM (the developers of ForestSafe) have developed a specific integration module between the standard ForestSafe solution and TADDM. ForestSafe allows the TADDM implementation to occur without breaking the security worries of the security manager. Using ForestSafe integration there are no accounts with non changing passwords, there is no longer a requirement for the support silos to share the passwords with a central TADDM administrator and most importantly there is no file or database containing all the credentials.

In addition there will be an ongoing cost reduction by using ForestSafe.  If you take a case where passwords change every month or even every week the TADDM administrator no longer has to spend time collecting and entering all these passwords and the security risk that this action entails is removed.  More importantly as the credentials are created prior to the start of the scan, the time spent checking the scans afterwards will be reduced as we know that the accounts created will be correct and available at the time the scan is run.