About Server Account Management
The Server Account Management feature of CloudPassage® Halo® allows you to monitor and audit remote access to your servers by all of the servers' local accounts. Halo scans your servers at a frequency that you specify, gathering account information and login history for all servers, then displaying it in a centralized location for your inspection and remediation.
The feature also provides basic account-management capabilities, allowing you to create, edit, or deactivate server accounts.
In an elastic cloud environment in which you may have hundreds of servers that come and go dynamically, using Halo for these purposes can save you time and also help to ensure complete coverage of your server installation.
Auditing Server Access
Setting up Halo to perform server-access scans and report on account activity is simple. Either (1) enable automatic scanning and choose the frequency of scanning that is best for you, or (2) specify the servers to be scanned and execute a manual scan.
Halo performs the scans and presents detailed results in the Halo Portal. The results identify all local accounts on each server, noting each account's access privileges and recent login activity. From this information you can easily identify unexpected accounts, inappropriate privileges, and suspicious login activity on any of your servers.
Administering Server Accounts
Halo also lets you control server accounts centrally from the Portal, so that you can remediate account issues uncovered by server-access scanning. For example, you can edit an account to change its permissions, you can deactivate an account that should not exist on a particular server, and you can even create a new server account.
The Halo Portal provides you with the convenience of manipulating all server accounts through one user interface. And for even greater convenience, you can use the Halo API to script automated actions across multiple accounts at once.
// <![CDATA[ var pdfTitle="Server Account Management"; var pdfURL="http://www.cloudpassage.com/document_images/sam/account-management.pdf"; specifyPDF(pdfTitle, pdfURL); // ]]>