Auditing and Logging

Reliable auditing coverage is the foundation any good privileged identity management solution. That's why Random Password Manager (RPM™) records and audits every action that it performs through a variety of methods. This includes text-based application logs, an internal auditing database, application Syslogs, email notifications, and integration with outside frameworks using traps for SNMP, Triggers for Microsoft System Center Operations Manager, and more.

RPM also audits and records access to its Web console for password requests, approvals and checkouts, delegation changes, reporting and other activities; access to its management console for configuration and reporting, and all password change job activity.

Alerting and Integration

RPM Auditing Report

RPM Auditing Reports Are Available in a Few Clicks 
(Click to Enlarge)

RPM alerts you when important events occur so you can take appropriate action. You can configure events to:

  • Trigger email alerts

  • Run specific programs

  • Communicate with trouble ticketing applications

  • Output event data directly into SIEM solutions, and other frameworks

RPM can also alert you on actions such as password requests and check outs, password changes, failed password change jobs, and web application activities.

In addition to out-of-the-box integration with popular Help Desk and SIEM frameworks, RPM integrates with virtually any Help Desk system, provisioning database, security framework and other key applications. Integrations that are not provided out-of-the-box can be quickly configured through the RPM interface, without the need for scripting or expensive professional services.

SIEM Integration

By themselves, SIEM applications lack the ability to correlate security events with human and automated actions that use privileged credentials. That's why RPM integration with your SIEM framework can close a critical blind spot in your security framework, tying individuals and processes that have privileged access to the security events that they can trigger. 

RPM integrates out-of-the-box with leading SIEM frameworks such as HP ArcSight ESM™, RSA enVision™, and Q1 Labs QRadar™, and is easily configured to interoperate with other SIEM platforms.

Contact us to learn more about how Lieberman Software can help you secure your organization's privileged accounts.

Live chat by SightMax