Site Search

Splunk

Splunk

MUCV (Macnica U's Case Visualizer) Blog - Introducing MUCV for CyberArk -

Introduction

Hello, this is a Macnica MUCV sales representative.

This time, we will cover our unique service, "MUCV for CyberArk," which helps resolve CyberArk operational issues for those who use CyberArk, a security service that provides privileged ID management.

The CyberArk Challenge

CyberArk is useful for preventing unauthorized access via privileged IDs, but have you ever had trouble with the following issues when using and operating CyberArk?

  1. Even if access occurs that does not go through CyberArk (detouring access), it cannot be detected.
    - I want to easily implement a function to detect detouring access so that I can detect when direct access to the server occurs.
  2. Details of detour access cannot be immediately confirmed.
    - When checking detailed information such as the date and time of access or the account used, it is necessary to directly check the access log of the managed server, which takes time to obtain and investigate the logs.

 

The service called "MUCV for CyberArk" solves these issues.

What can you do with MUCV for CyberArk?

By using this service, you can prevent gaps in privileged ID management by CyberArk, and support early detection of unauthorized access and strengthening governance by CyberArk.

  1. Detecting bypass access using privileged IDs
    • By monitoring the access logs of managed servers, we can detect any communications that do not go through CyberArk.
    • In the event of a circumvention attempt, the administrator will be notified in real time.
  2. Instant confirmation of detour access details
    • You can check details such as the account name that made the circumvention access, the date and time, and the source IP address from which the access was made from the service console screen.
    • You can also check information about past detour accesses going back up to the past 90 days.
実際の調査フロー例

First of all, what is MUCV?

It is an abbreviation for Macnica U's Case Visualizer, and is an MSP Cloud service using Splunk provided by Macnica that aims to make it easy for anyone, to use the data utilization platform at an early stage, and at a low cost.

For more details, please see the following link:
https://www.macnica.co.jp/business/dx/manufacturers/mucv/

First of all, what is MUCV?

the MUCV for CyberArk service?
If you are interested in Want to know more about MUCV for CyberArk, please contact our sales representatives below!

·contact address:
splunk-sales@macnica.co.jp

in conclusion

Thank you for reading to the end.
We encourage our customers to use MUCV for CyberArk to solve their problems."
I hope I can be of help to you. I look forward to hearing from you.

Inquiry/Document request

In charge of Macnica Splunk Co., Ltd.

Weekdays: 9:00-17:00