Imprivata Privileged Access Management

What differentiates Imprivata Privileged Access Management from other similar products?

Easy navigation and easy to use.

What is your favorite aspect of this product?

RDP sessions are seamless.

What do you dislike most about this product?

The discovery portion never worked even after contacting Support and still has not worked yet. We got the discovery working when we had the POC but now that we have the LIVE the Imprivata Engineers are still figuring out why it's not working. Also it's not about the product but every time I submit a case, I always get the same person who asks "if I did this or did that" when it's clearly stated in the case what has been done and screenshots have been provided.

What recommendations would you give to someone considering this product?

To carefully utilize the POC before getting the Live product.

What differentiates Imprivata Privileged Access Management from other similar products?

In browser RDP sessions.

What is your favorite aspect of this product?

In browser RDP sessions and simple interface.

What do you dislike most about this product?

The documentation leaves more to be desired. It is difficult to find information on our own without involving support. There is also no dedicated support portal for this solution with the only way of contacting support and tracking the ticket is through email. The documentation is also hard to find as there is no quick link from the tool to the site for either end users or admins.

What recommendations would you give to someone considering this product?

With the current status of the documentation for this tool, it is almost required to pay for professional services to help implement due to the lack luster documentation. It can be done but it takes a lot longer to complete.

What differentiates Imprivata Privileged Access Management from other similar products?

Integrates with other Imprivata product suites, fits nicely to the overall econsystem and user experience. Imprivata is synonymous for Tap-N-Go, ImprivataID for MFA and EPCS, SSO, and now PAM.

What is your favorite aspect of this product?

We used to give vCenter access to IT personnel, support staff from other departments, and vendors for server console and/or RDP access. We had no method of managing, auditing, or knowing when these systems were accessed or changes were made. This is a major issue, and Imprivata PAM provided us with the option to block RDP access and remove vCenter access. Forced privileged users to access PAM and initiate an RDP (HTML5) session to servers they have privileged to, PAM would utilize their privileged account credentials to sign in and users never need to know their password, and all sessions are all recorded.

What do you dislike most about this product?

Imprivata PAM is very technical and specific. Initial implementation for the administrator can be repeatitive, tedious, and time-consuming. This is due to granting specific privileges because everything is access-based. Once the system is setup; server's are added to PAM, assigning IT users to their privileged accounts (which has to be created separately in AD), setting up rules for PAM to cycle privileged accounts passwords either daily or every time it is checked out/in, defining session recording rules, and using PAM as an IT vault. The system is simple to learn but Implementation is time-consuming (depending on the size of org.)

What recommendations would you give to someone considering this product?

Without PAM it is extremely difficult to meet Cyber Security insurance policy requirements. Creating and managing privileged accounts without a way to audit is impossible. Imprivata PAM bridges it altogether with your regular access and privileged account. This is most important in healthcare IT environments due to staff turn over, use of third-party passwords such as Keepass and other solutions, and making sure people have access to what they need and nothing more. Imprivata PAM is an IT vault, Remote Session Console to servers/systems, and much more. It creates a framework that allows the organization to strengthen it's IT security posture.