BeyondTrust Privileged Identity Reviews

Simple and easy UI to use. Nothing much is required to use either one has to be technically strong enough. It offers a packaged experience for maintaining PAM / PIM accounts.

Reports and analytics took too much time to load. And even if we get into it, still takes a lot of time to generate the analytics. And sometimes Password Safe is slightly hanged due to too many accounts imported.

Helps to organize PAM accounts, and also enables us to use the servers/firewalls/network devices/vspheres to log in directly from the beyond trust application as it has been already integrated.

BeyondTrust Privilege application identifies suspicious activity then and there, and even if there is a change in the network connection, it quickly triggers the users to authenticate with Passwords (Multifactor Authentication) time to time. I also like how it helps differentiate different type of users by restricting or limiting the access individually.

I strongly feel that BeyondTrust Privilege should refine or rework the Auto-Discovery feature. Sometimes it gives you a headache. It suggests changing the password even when there is no major suspicious activity.

Integration with third-party software is easy. One can easily support incidents from Service now at ease. It also helps integrate with SIEM frameworks such as Splunk.

ERPM works very well in a clean environment. As long as your DNS is accurate it will do its job.

The big flaw is you cannot set rights at the management set level. It treats a Directory (Active Directory) like a single server. As a result you have to set granular rights on each account. Also account checkout times are universal. Also to do an patch the entire ERPM system has to be taken off line.

Make sure you understand the limitations of this software. As I stated earlier the support for an Enterprise Directory is poor at best.

Randomizing local passswords on servers and desktops. Checking out generic directory accounts.