Who holds the most valuable keys?
Server administrator accounts, firewall passwords, database accounts. These keys are often shared among a few people, left unchanged for years and stored in a file. Meanwhile, Active Directory accumulates accounts left open by former employees and permissions broader than necessary.
Attackers know this. The first goal of an attacker who breaches a network is to take over a privileged account. Identity and access management delivers two things together: every user has only the permissions they need, and the most critical access is recorded.
Which solution for which need?
ADManager Plus: order in users and permissions
It ties the creation, modification and removal of Active Directory and Microsoft 365 accounts to templates and automations, and reports on risky permissions. It is the foundation of identity management. Explore ADManager Plus.
Password Manager Pro: password vault
It gathers the administrator and service account passwords shared by teams in an encrypted vault, rotates them automatically and records every access. A strong starting point for teams that want to bring order to passwords. Explore Password Manager Pro.
Access Manager Plus: secure remote access
It lets administrators and external service providers connect to servers through a browser, without a VPN, in recorded sessions. Explore Access Manager Plus.
PAM360: enterprise privileged access platform
It combines a password vault, session management, time-limited access, and SSH key and certificate management in a single platform. For organisations where several teams access critical systems. Explore PAM360.
Identity and access management with Unna
- We listen first. Together we take an inventory of your user accounts and privileged accounts. This step often produces surprising results.
- We plan together. We define your joiner and leaver processes and which team will access which systems under which conditions, and choose the product that fits your needs.
- We install and clean up. With your approval, we clean up accumulated account clutter, move passwords into the vault and trial automatic rotation on non-critical accounts first.
- We stay by your side. We regularly review access reports with you and confirm that leavers’ access has been closed.
Part of the whole
- Once who can access what is under control, we monitor where the accessed data goes with Safetica DLP.
- When firewall and server administrator passwords are placed in the vault, the most critical keys of network security also come under control.
- In ISO 27001 and KVKK audits, these solutions produce the evidence that authorisation and access are controlled.
- As part of server management, we also monitor the health of your domain controllers.
Frequently asked questions
Where should we start?
For most businesses, the right order is to bring Active Directory into order first, then place administrator passwords in a vault. We set priorities together with you during the inventory work.
Isn’t this unnecessary for a small IT team?
If the team is small, the risk is even higher, because a few people know all the keys. Password Manager Pro is an easy-to-manage starting point for small teams.
How should suppliers connect to our systems?
With time-limited, approved and recorded sessions instead of permanent VPN accounts. Access Manager Plus and PAM360 are designed for exactly this need.
