| |
Home > Products > How It Works
|
How FoxT's Enterprise Access Control Management Works
FoxT's Enterprise Access Controls Management solution suite features a central security policy manager server, BoKS Manager, that can be integrated with your existing corporate directories for centralized identity and access management. The BoKS Manager server then becomes the central security policy engine, driving other agents which control the access to servers, applications, desktops and other wired or wireless devices.
BoKS Manager, the core security server for FoxT Enterprise Access Control Management solutions, provides the attachment of your enterprise access controls and security policies to approved identities in your enterprise infrastructure. Through tight integration with your existing directory services and account management tools, FoxT's solutions serve as an extension of corporate identity management to control access policies for diverse IT environments. On BoKS protected devices, BoKS agents enforce centrally managed access rules and report all events back to the security server to achieve centralized audit logging of all user activities and related security events. If needed, BoKS can even enforce logging on the level of individual keystrokes.
BoKS turns the data center into a virtual security domain where all user accounts and roles can be managed from one central console. The virtual domain can then be divided into host groups for efficient segmentation and easier user provisioning. Permissions and local group membership are also managed from the same console. Administrators gain a wide range of tools for configuring and securing the data center and can safely delegate appropriate tasks to sub-administrators.
Integrating with Existing Identity Management
To support real-world scenarios as efficiently and flexible as possible, FoxT Enterprise Access Controls Management integrates with existing meta-directories, LDAP, or Active Directory repositories if already available for identity management workflows. The various BoKS solutions for Workstations, Applications and Servers respectively, add a separate layer of dedicated access management and auditing capabilities within an existing infrastructure.
Introducing Access Routes and Authenticators
The three FoxT Access Control solutions share a common multi-service security server through which some important new concepts are provided, such as Access Routes and Authenticators. An Access Route is a defined path from one computer, application or network segment to another computer or segment with specified time constraints for a given access method. In a system locked down by FoxT enterprise access controls, only explicitly allowed Access Routes remain available. More or less strict requirements on the Authenticator can be defined as well when a user is accessing resources along a given route.
- Is a password enough for login to a specific application or server?
- Or do we require tokens for two-factor authentication.
- Or possibly smart cards and x.509 certificate-based authentication?
- Can I access this server using telnet?
- Or do I have to use SSH and smart card authentication?
- Can I access this server after office hours?
The FoxT BoKS security server has the answer to questions like these, translated into policies which then will be enforced throughout the organization.
Virtual Network Segmentation for In-Depth Defense Strategies
Combined FoxT Access Control for Servers, Applications and Desktops allow an organization to achieve efficient segmentation of the network providing a whole new set of in-depth defense lines to strengthen security and comply with auditor requirements.
Overcoming the Password-Trauma
While FoxT Enterprise Access Controls Management introduces user and role-aware access controls for applications and servers, it also improves the end-user experience. The FoxT client on the workstation keeps track of user credentials enabling single sign-on to protected resources. As a result, security improvements are achieved along with productivity enhancements. No more frustration due to strict password policies; security ceases to be a burden to end-users once the easy way and the short-cuts turn out to be the safe and proper way to get the job done.
Want to Know More About How BoKS Enterprise Access Control Management Works?
BoKS Access Control & Authentication Infrastructure
BoKs Fine-Grained Access Control Management
BoKS Host Groups, User Groups, and Classes
|
|
|
