Types of access disclosure plugins
There are several types of access disclosure plugins:
Native access disclosure plugins: These are Javascript controls that can be installed on users’ workstations prior to disclosing passwords. Alternatively, a one-time disclosure method can be used to access the plugins.
Guacamole access disclosure plugins: Unlike native access disclosure plugins, these are controls that are viewed directly from a web browser and do not require installation of plugins or client software. These controls work on any browser that supports HTML5. A Guacamole gateway is required in order to use it.
Website access disclosure plugins: These controls launches either a browser tab or a secure browser window and automatically logs into a website using a configuration defined in a JSON file. Installation of a browser extension or client software is required in order to use it.
Bravura Privilege ships with the following native access disclosure plugins:
Run command: pswcmdrun is used with account set access requests. It allows users to run commands or scripts on multiple managed systems using managed account credentials.
When a user checks out an account set, Bravura Security Fabric displays a command execution window if any of the member systems support the run command operation.
Command prompt: pswxcmd provides users with access to managed systems by executing an external program and providing credentials.
There are three types of command prompt controls; one is specifically for accessing managed accounts, and the other two are for temporary group membership, where the password can either be passed onto the command line, or specified upon connection to the remote server.
This plugin is compatible with session recording.
This is a preconfigured
pswxcmdaccess disclosure plugin used for accessing managed accounts with SSH keys instead of passwords.This plugin is compatible with session recording.
Copy: pswxcopy provides users with access to a password by copying it into the clipboard of the client workstation.
Remote desktop / Remote APP RDP: pswxtsvc provides users with access to Windows server or client managed systems and RemoteApp programs using Remote Desktop Connection (RDC). The plugin provides automatic connection to the managed system without the need to enter the administrative credentials for the managed account.
This plugin is compatible with session recording.
Display: pswxview provides users with access to a password by displaying it within the browser.
When the secure method is enabled, Bravura Security Fabric uses JavaScript to decrypt the privileged password embedded in the page.
If the insecure method is enabled, the browser can store passwords in plain text in the page source, and users can access the accounts in browsers that do not have JavaScript enabled. Users access the managed system by hovering their cursor over the View button.
Bravura Privilege ships with the following Guacamole access disclosure plugins:
In-browser RDP: guacamole-rdp provides users with access to Windows server or client managed systems using Remote Desktop Connection (RDC).
In-browser Remote App: guacamole-remote-app provides users with access to a remote application (RemoteApp) hosted on a Windows server or client managed systems.
In-browser SSH: guacamole-ssh . provides users with remote access to a server using Secure Shell (SSH).
In-browser Telnet: guacamole-telnet provides users with remote access to a server using Telnet.
In-browser VNC: guacamole-vnc provides users with remote access to a managed system with Virtual Network Computing (VNC) enabled.
All Guacamole access disclosure plugins provide automatic connection to the managed system without the need to enter the administrative credentials for the managed account and are compatible with session recording.
A Guacamole gateway is required in order to use Guacamole access disclosure plugins. See Installing and configuring Guacamole on how to set up a Guacamole gateway and configure the controls to use it.
Bravura Privilege ships with the following website access disclosure plugins:
Secure browser: securebrowser launches a dedicated program that automatically logs into a website using a configuration defined in a JSON file. This is compatible with session recording.
Requires installation of the Bravura Security Secure Browser program.
Web app privileged sign-on: pswxwebapp launches a separate browser tab that automatically logs into a website using a configuration defined in a JSON file. Requires installation of the Bravura Security browser extension.