A VPN opened for a supplier is a door someone forgets to close
The ERP consultant connects once a month, the printer company twice a year, the software team every day. The VPN account created for each of them often stays open long after the work is done. Whoever connects can see a large part of the network, yet what they do on the server is not recorded. When something goes wrong, all you have is an IP address and a time.
ManageEngine Access Manager Plus is privileged session management software that turns remote access to critical systems into browser-based, approved and recorded sessions.
What does Access Manager Plus do?
One-click connections without a VPN
Users open RDP, SSH, VNC and SQL connections from a browser through an encrypted gateway. They see only the systems assigned to them. Jump box support for Windows and Linux simplifies access to systems in the data centre.
Logs in without revealing the password
Sessions are opened automatically with credentials stored in the system. The supplier’s staff never see the server’s administrator password, so you do not have to change the password once the work is finished.
Ties access to requests and approval
The user requests access, an authorised person approves it, and access is granted for a set period. Requests can be validated against a help desk ticket number. Sign-ins can use authentication via Active Directory, LDAP or Entra ID, together with two-factor authentication.
Records every session and stops it if needed
Sessions are stored as video, encrypted with AES-256. An ongoing session can be watched live and terminated instantly. Logs can be forwarded to SIEM systems via syslog and SNMP.
Access Manager Plus with Unna
Access Manager Plus is for organisations whose main concern is bringing remote access under control: those working with external service providers, those with servers in a data centre, and small IT teams that manage systems remotely. If comprehensive password management is also needed, we evaluate PAM360 alongside it.
- We listen first. We work out who connects to your systems, by which route and how often. Forgotten VPN accounts usually come to light at this stage.
- We plan together. For each user and supplier, we define the systems they can access, the approval rules and the recording policy.
- We install and commission. We set up the gateway, migrate the connections and, once suppliers have moved to the new method, close the old VPN accounts.
- We stay by your side. We review session reports with you and confirm that access for completed projects has been closed.
Part of the whole
- On the identity and access management page, we explain the differences between the three ManageEngine products.
- Password Manager Pro for gathering passwords in a vault and rotating them automatically; PAM360 for both and more.
- On FortiGate, we simplify the VPN rules left open for suppliers and reduce access to a single gateway.
- Servers hosted in the data centre are accessed through the same approved and recorded route.
- In ISO 27001 and KVKK audits, session recordings show that third-party access is controlled.
Frequently asked questions
Does anything need to be installed on the supplier’s computer?
No. The connection opens in a browser. The supplier’s staff member simply signs in with the account assigned to them.
Can files be transferred during a session?
Yes. Files can be transferred between the remote system and the local computer via SCP and SFTP. We decide together during set-up which users may use this feature.
How does it differ from Password Manager Pro?
Password Manager Pro manages passwords; Access Manager Plus manages connections. One focuses on the vault, the other on the session.
