Skyport Systems announced a turnkey solution to deliver a hardened implementation of Microsoft Active Directory.
Through a partnership with Ascent Solutions, Skyport SkySecure delivers bundles for data center Active Directory production forests, highly secure ‘Red Forest’ administrative zones and cloud access DMZ authentication services. Skyport said this provides a clean source computing platform with secure boot and ongoing malware and rootkit prevention and detection.
As part of this solution, Skyport Systems is announcing new SkySecure capabilities specifically designed to help secure the Active Directory environment. These include:
- Kerberos ticket inspection to mitigate fraudulent administrator log-ins, ‘golden ticket’ attacks, and unacceptable use of older NTLM protocol versions
- Authorized/unauthorized administrative access enforcement and accounting of all logon sessions and attempted sessions into and out of secure administrative environments
- Application-layer microsegmentation that enables secured communications only between participating servers in the architecture
- Active audit reports to validate the on-going operation and continuous monitoring of the architecture and its consistency with ongoing best practices evolution
- Continuous validation of the clean source status for the computing platform including all components, software and updates that are admitted into the secure enclave
“Working with Ascent Solutions will greatly simplify a critical area of enterprise security for our customers,” said Art Gilliland, CEO of Skyport Systems. “Skyport Systems’ clean source, zero-trust infrastructure makes critical IT assets such as credential management systems secure by default, making it an ideal system to use for implementing Microsoft’s most recent guidance on securing privileged access.”