METHOD AND APPARATUS FOR ENFORCING REALTIME ACCESS CONTROLS FOR ENDPOINTS

摘要

An approach is described for provisioning and enforcing realtime granular access controls for endpoints. The approach involves enforcing realtime access controls, via a privileged access management appliance, of a plurality of accessors, endpoints, and approvers, to provide for securing, controlling, auditing, and reporting of access to endpoints.

主权项

1. A method comprising:
detecting, via a privileged access management (PAM) appliance, an attempt to access an endpoint device by an accessor device, wherein the endpoint device is among a plurality of endpoint devices within a network, and wherein the PAM appliance manages access rights to the plurality of endpoint devices, establishing, via the PAM appliance, a session between the endpoint device and the accessor device based on an access policy assigned to the endpoint device; and transmitting a report of the session to an approver device based on the access policy, wherein network traffic among the plurality of endpoint devices, the accessor device, the approver device, other systems of the network, or a combination thereof is managed by the PAM appliance.