BalaBit Shell Control Box

2017: Shell Control Box 5

On May 10, 2017 the Balabit company submitted the version of Shell Control Box 5.

The upgraded SCB 5 functions promote investigation of incidents, simplify control of exclusive accounts in large cross-platform environments and provide compatibility with solutions for security.

Shell Control Box 5 gives to the companies more opportunities for seamless integration of infrastructure for management of sessions of privileged users with other cybersecurity tools, such as SIEM systems and solutions for password management. The version of Shell Control Box with important user and integration improvements will help cybersecurity specialists to manage on a centralized basis security in the difficult, closely interconnected environments. Its agentless architecture provides a minimum of costs for implementation and service and the fastest payback of any solution for management of exclusive sessions in the market. Zoltan Djyorku, CEO of Balabit company

As a part of the added features for Shell Box Control:

• The improved interaction with the leading SIEM solutions
• deep integration into external SIEM solutions into their native interface allows analysts on security quickly to find the events generated in SCB, increasing the speed of reaction to incidents.
• Seamless integration with third-party solutions for password management and keys
• Supporting the closed SSH keys, SCB 5 LTS facilitates integration and interaction into the leading solutions for password management and keys, such as solutions of Lieberman.
• Expansion of the solution Balabit Desktop Player audit playback with new cross-platform support
• SCB 5 LTS desktop video player does process of a research of incidents quicker and more simply with more detailed parts of sessions. Cybersecurity specialists can get access to a new player already on Windows and Linux. Possibilities of setup and the clear interface give to auditors a complete overview of all logs even if they are ciphered.
• the intuitive, ergonomic graphical user interface (GUI) the interface provides the IB-intuitive service to specialists.

2016: Balabit Shell Control Box received the FSTEC certificate

Balabit Shell Controll Box (SCB), received the FSTEC certificate at the beginning of 2016. SCB provides monitoring of activity and control of exclusive access to remote servers and network devices and performs video fixing of actions of users that allows to recover easily a chain of events and to perform search of activities in a key word.

Administration of the majority of servers in the large companies is performed using the ciphered protocols of remote control - Secure Shell (*Unix) or Remote Desktop (Windows) that complicates observation and control over administration of the remote systems a little. It is necessary for implementation of reliable control that data collection was imperceptible and independent of the client and the server, otherwise the experienced administrator (or the malefactor) will be able to hide records about the actions or about other events of information security. Shell Control Box solves such problems, providing the separate level of audit to give the chance to observe and control administrators of remote IT systems.

The product received the FSTEC certificate on the basis of results of the tests which are carried out by Eshelon Scientific and Production Association Ltd laboratory and the expert opinion of FSTEC of Russia certification body.

2015

Next version of Shell Control Box

On June 9, 2015 the BalaBit company announced an exit of the next version of the flagship product of Shell Control Box (SCB).

Among features of a product there are an increased flexibility and ease of use, compliance to standards of security for payment cards (PCI DSS), presence of new level of authorization. All this will help the organizations to control better access for users to network resources in real time.

Shell Control Box, 2014

"SCB helps the organizations to find the original reasons of problems, using data, suitable for audit, and also providing necessary proofs for investigations and court — Zoltan Djyorku (Zoltán Györk ő), the CEO of BalaBit noted. — The last release of this technology tool includes a number of new features for our clients, especially from the sphere of telecommunications, the financial industry and the companies which are engaged in IT outsourcing. The solution provides new levels of protection, at the same time increasing flexibility and providing convenience of work. Creation of products which guarantee real return of investments and conform to strict security requirements — our main objective".

The upgraded BalaBit Shell Box Control contains:

• Reports on compliance of PCI DSS:
  • the Market of solutions for monitoring of activity of privileged users is defined by different requirements of regulators more and more. In those organizations where compliance of PCI DSS is required, the new version of SCB will help to create reports for audit of PCI DSS.
  • BalaBit SCB will allow to expand and add reports of the companies on compliance to requirements at the expense of information from the SCB interface.

• Web player for viewing data:
  • the Unique system of demonstration of data of monitoring in video format from BalaBit is available also via the built-in web interface now. The web player can reproduce the written sessions of work of users with speed control of video. In it the technology of intuitive event detection and a possibility of fast creation of screenshots for audit and investigations are already implemented.

• Support of TN5250 protocol:
  • the New version allows safety managers to monitor remote access to mainframes of IBM and other legacy systems of UNIX. SCB will help the organizations to provide monitoring and audit of remote access of administrators to systems by means of TN3270 and TN5250 protocols.

• The built-in system of authorization for connections of RDP:
  • the Additional level of authorization is added to the solution in the form of a request of ID of the administrator for check whether it has a reasonable reason to get access to the server. In need of establishment of a remote session of SCB at first will demand authorization on the gateway, then will perform check of ID. At positive result of check the administrator will be able to work; in the return case connection will be reset.

• Support of VLAN:
  • the Solution SCB supports virtual networked environment and is capable to organize work of users of any quantity of segments of VLAN instead of movement, reconfigurations and reconnections of clients and servers in all network. Now for this purpose it is possible to use the available network SCB interfaces and to configure VLAN at the level of the existing physical interfaces. It provides exclusive flexibility during the work with network.

Shell Control Box

For June 9, 2015 Shell Control Box is the monitoring device, audit and protection of exclusive access to workstations, servers and network devices. BalaBit Shell Control Box is the device which controls and books audit of remote administrative access to servers, virtual PCs or network devices and keeps record of the users getting access to direct systems. Shell Control Box can send lists of the opened and/or moved files to the external DLP solution. In turn the solution on data loss prevention will recognize, analyzes, traces and warns about access or transfer of important information.