CyberArk PAS - Great Product to add security
August 27, 2020

CyberArk PAS - Great Product to add security

Anonymous | TrustRadius Reviewer
Score 8 out of 10
Vetted Review
Verified User
Review Source

Overall Satisfaction with CyberArk Privileged Account Security

We use CyberArk across our IT department to manage passwords to privileged accounts. We also use it to manage non-rotating passwords to applications that require administrator-level access.

It solved for:
1. Rotation of passwords while maintaining the minimum requirements for the password. We automatically rotate admin-role passwords after x number of days and maintain complexity.
2. Password storage: Due to the cross-collaborative environment, we needed a location to store passwords for different applications.
3. Different Safes: Not all passwords should be seen by others - the concept of safes in Cyberark helped with RBA type control.
4. Monitoring/Alerting/Reporting
  • Password segregation via RBAC
  • Rotation of passwords
  • View/reconcile/Verify passwords
  • Options to store passwords
  • GUI - right now everything is on one page/dashboard. Some level of folder/Safe type view would be great
  • More options when storing passwords - especially for network based passwords
  • Better integrations with vendors like Cisco so that admins dont need to really get the password from the vault (think Last Pass type add on)
  • It provided extra security for passwords in use and rotation of admin-level passwords.
  • Complexity of passwords guranteed.
  • Some basic integrations.
We used Thycotic in the past. Thycotic is a very basic password manager that did not provide the features we were looking for. The GUI wasn't too great, there wasn't much of reporting/monitoring, and the amin level management of thycotic was cumbersome.
In a department with cross collaboration, it was difficult to manage access. Folder structure inherited access information from parent folder - that could create additional challenges.
It also had no additional integrations.
We have had some challenges with their support.

Do you think CyberArk Privileged Account Security delivers good value for the price?

Yes

Are you happy with CyberArk Privileged Account Security's feature set?

Yes

Did CyberArk Privileged Account Security live up to sales and marketing promises?

Yes

Did implementation of CyberArk Privileged Account Security go as expected?

Yes

Would you buy CyberArk Privileged Account Security again?

Yes

Okta Customer Identity, SolarWinds Network Performance Monitor (npm), SolarWinds Network Configuration Manager (NCM), Cisco Defense Orchestrator, Cisco Umbrella, Cisco Firepower Management Center (FMC series appliances), Cisco Firepower NGFW (formerly Sourcefire), Rackspace Cloud Hosting, Cisco Identity Services Engine (ISE)
Well suited where you have cross collaboration among admins/users. This enables the storage of passwords in one place without being stored on notepads. It integrates with Okta SSO for an additional layer of security.
It has minimum complexity requirements and has detailed monitoring - you need to state a reason to see the password.

CyberArk Privileged Account Security Feature Ratings

Using CyberArk Privileged Account Security

30 - Most of them are in IT - help desk, Infrastructure, Security, Applications and Data.
We are looking to expand the scope to other departments within the company due to the additonal security layer it provides for our passwords.