Cyber-Ark Software Enterprise Password Vault

The Cyber-Ark Enterprise Password Vault, or EPV, is a high-end password management powerhouse.

This product helps administrators manage privi­leged account passwords across several major platforms using an advanced FIPS 140-2 validated cryptography module. This Vault also keeps critical password information secure using AES 256-bit encryption, along with solid auditing and tracking.

Installation and deployment of this system is almost plug-and­play. Once we did some initial configuration on the appliances, we were up and running. The web-based management interface is simple and intuitive to use, and a clear and organized dashboard provides a quick overview of man­aged systems by type, along with password usage statistics.

Flexibility and granularity is the best way to describe the performance of this system. The EPV can manage almost any sys­tem or service account. Some of these include operating systems, such as UNIX, Linux, AS/400, MVS and Windows; databases, such as Sybase, Oracle, MS Access and MS SQL; firewalls, such as Cisco, Checkpoint and Juniper; and network devices, routers and key systems, such as LDAP and Active Directory. This high amount of flexibility assures solid and secure management of all critical accounts across the entire environment.

Documentation provided with the EPV includes an installation and upgrade guide, an implemen­tation guide and an application identity management guide. All these were very well organized and included many screen shots and configuration examples.

Cyber-Ark provides no-cost basic support for the Enterprise Password Vault via access to the online knowledge base and cus­tomer portal for a minimum of two years from date of purchase. Customers can also have access to phone and email-based support as part of a support agreement.

With a price starting at US$21,000, this product may seem quite pricey. However, we find it to be a solid value for the money.

The EPV gives a high amount of granularity and flexibility across an entire enterprise of systems and accounts.

See original article on SC Magazine US