CyberArk Privileged Access Management vs. Self Service Reset Password Management

The system is great for enterprise or larger IT departments or teams where temporary or full access may be given using privileged IDs. Requirements for needing local admin access is also eliminated which can help with specific Windows workstation related tasks. It can be very useful when working with remote teams or contractors who may need temporary access to a system when required.

Incentivized

It's a great tool for limiting (eliminating) calls to your IT department or Help Desk to assist with Windows Login issues. For organizations that don't mind having a dedicated onsite or hosted server to provide this type of service its a great tool to have implemented in the environment.

Incentivized

• Managing local administrator accounts for Windows Servers
• Managing local root accounts for Unix Servers
• Managing service accounts for Windows Servers
• Managing IIS Application pool passwords for Windows web servers.

Incentivized

• It provides ease of use in assisting end users with login issues.
• Provides self-service when passwords or account assistance is needed.

Incentivized

• GUI - right now everything is on one page/dashboard. Some level of folder/Safe type view would be great
• More options when storing passwords - especially for network based passwords
• Better integrations with vendors like Cisco so that admins dont need to really get the password from the vault (think Last Pass type add on)

Incentivized

• The product serves its purpose fairly well. Perhaps an additional feature that can assist remote users would be beneficial.
• Sending alerts or notifications when a user has been locked out would be great. We are able to access this information from the Admin Portal but a system generated email would be helpful.

Incentivized

I think CyberArk is a great product and there are many different modules to incorporate. There are many great feature sets available right out of the box and you feel safer just implementing some of the basics. The more features you implement the better the product performs. There are definitely some implementation hurdles, but typically they are too difficult to figure out.

Incentivized

I've been an engineer and architect in the Identity space for many years and CyberArk is the #1 tool I've found to help me secure accounts and credentials. I've architected CyberArk and built the implementation from the ground up twice in previous roles and found it here upon my arrival at my current job. I wouldn't want to have to live without it as it helps me sleep at night

Incentivized

It is known as one of the safest products in the market. It has good support and is also available as on-premise. You can run it virtually on VMWare (and probably on other hypervisors as well). You can have a second instance on bare metal and that makes it a very safe system.

Incentivized

There were no other services that we had the opportunity to compare this to. It seemed to be one of a kind product aside from using some type of biometrics solution.

Incentivized

• A positive impact is passing SOX audits when it comes to privileged account management. Making sure we are compliant with password expiration policies and complexities.

Incentivized

• It has helped us reduce cost on the amount of time spent on assisting users with Windows Login issues.
• A decreased number of calls to our Help Desk allowing for IT to work on bigger tasks.

Incentivized