Symantec Security Software

Symantec Privileged Access Management (PAM)

A privileged access management solution providing comprehensive protection and control over elevated user access. Protect your organisation's sensitive data.

Request a Demo

Privileged Access Manager (PAM) is an automated privileged access management solution. It centrally manages local and remote high-risk users across physical, virtual and cloud environments.

The core product secures privileged and third-party user access to critical infrastructure through a combination of device access control and privileged credential management:

Network-based Device Access Control

Uses existing identity and access management infrastructure to support stronger or multifactor authentication for privileged users.

Password Access Control (Credential Manager)

Provides password access control to manage password settings, storage and access.

PAM Overview

Core PAM functionality improves security by automatically performing the following tasks under your defined policies:

Protecting Sensitive Administrative Credentials, Such as Root and Administrator Passwords.
Privileged User Access Management
monitoring and recording privileged user activity across IT resources

PAM Is Available in the Following Formats:

Rack-Mounted Hardware Appliance
Open Virtual Appliance (OVA)
Amazon Machine Instance (AMI)
Virtual Hard Disk (VHD) for Azure

Core and Additional PAM Capabilities

PAM Provides the Following Core Capabilities:

Granular Policy Enforcement

Policy enforcement separates high-risk users using integrated Java applets with reverse port tunnelling, isolating critical IT infrastructure components and supporting segregation of duties for compliance. Symantec LeapFrog Prevention™ restricts users within these segments using allowlists and blocklists, preventing movement outside authorised areas at the socket level.
User Activity Monitoring

User activity monitoring tracks actions and provides real-time alerts about attempted policy violations. Administrators are promptly informed when access violations are attempted, detected or prevented. Access can be terminated if a user attempts to reach an unauthorised system or device.
User Event Recording

User event recording centralises activity tracking through session recording and playback. Administrators can review user actions in CLI sessions. Recording can be configured by user profile or endpoint. Command-line activity is monitored, recorded and archived for audit and compliance.
Centralised Reporting

Centralised reporting provides comprehensive, tailored audit and compliance reports for all user-initiated events. Reports can include usage data and attempted security breaches. You can also run automated reports focused on individual users' compliance, schedule them at predefined intervals and distribute them by email.

PAM Provides the Following Additional Capabilities:

Secrets Management

Policy enforcement separates high-risk users using integrated Java applets with reverse port tunnelling, isolating critical IT infrastructure components and supporting segregation of duties for compliance. Symantec LeapFrog Prevention™ restricts users within these segments using allowlists and blocklists, preventing movement outside authorised areas at the socket level.
Host-Based Device Access Control (Unified PAM Server Control)

User activity monitoring tracks actions and provides real-time alerts about attempted policy violations. Administrators are promptly informed when access violations are attempted, detected or prevented. Access can be terminated if a user attempts to reach an unauthorised system or device.
Threat Analysis

User event recording centralises activity tracking through session recording and playback. Administrators can review user actions in CLI sessions. Recording can be configured by user profile or endpoint. Command-line activity is monitored, recorded and archived for audit and compliance.

Our Customers