EPM offers capabilities to manage threats associated with local administrative rights on laptops, tablets, smartphones or other endpoints. EPM tools essentially offer controlled and monitored privileged access via endpoints and include capabilities such as application whitelisting for endpoint protection.

In today’s world corporate environments are more vulnerable than ever, requiring careful application control and user privilege management. EPM introduces a combined solution for application control, privilege management, and threat detection. This full set of application control and privilege management provides granular control to a secure desktop and server environment. Setting up a risk-based application control framework establishes default behaviour for managing unclassified applications in your Windows environment.

Using EPM, desktop functions that require system administrator assistance can be performed from a Web-based management console, based on on-premise or Cloud (SaaS) deployment of EPM. The administrator and desktop are both connected to the EPM Web service through a secure HTTPS protocol. Our method of Web-based desktop management works beyond the corporate network, whether online or offline (no VPN access is required). This architecture improves the maintenance and support capabilities for mobile users.

Whether online or offline, endpoints continue to operate under EPM policies, for example within the least privileges mode, except for those functions flagged for elevated privileges, such as running applications that require Administrator rights or installing printers. Likewise, Application Control Inbox settings and defined rules continue to apply to endpoints.

Cyberi3secure has experience in deploying both on premise as well as Saas based solution of CyberArk EPM. While deploying these solutions we were able to accomplished following:

Cyberi3secure we were able to successfully  accomplished  the following: