One Identity Safeguard Reviews

We use it for controlling the client sessions into our data center.

We deployed it into our company for controlling a client's behavior in our data center. It is very useful to control their connections, such as RDP. 

I requested for an evaluation license, but no one responded to me. 

We can't review or audit HTTP and HTTPS. This functionality should be added so that we can review and audit HTTP and HTTPS.

I have been using this solution for less than one year.

It is stable.

It is scalable. It scales well in our company.

I requested them for an evaluation license, but no one responded to me. They didn't give me an evaluation license.

I have some knowledge of Wallix. It is a competitor of One Identity. They have similar functionalities, but I didn't explore it too much.

It was easy. There were no problems. It is easy to navigate through the web interface.

As compared to other products, it is reasonable, but the training sessions are too expensive.

I haven't used other products, but I would highly recommend One Identity SPS.

I would rate it an eight out of 10.

Privileged management. 

Administrators can administrate the privileged accounts. It is a safer way to monitor the administrators.

Its hardware and compliance.

Stability is very good.

Scalability is very good.

The customer service and technical support are very good.

The initial setup is very easy.

I compared different solutions, like Oracle.

It is a good solution, but it needs more marketing.

Most important criteria when selecting a vendor:

• The support
• How long the product has been in the market.

We primarily use the solution for managing and monitoring privileged users, both internal and external.

Gave much more visibility over who is doing what and more granular control over external support engineers.

The solution's most valuable features are the efficiency and the quality of the recording.

I would like to see an adjustment with more enterprise architecture. Currently for SPS (SafeGuard for Privileged Sessions) there is only a single appliance option (both virtual and physical). It can be scaled using a load balancer to handle huge amount of sessions (although the device is quite efficient), but it also means you will need to purchase multiple boxes. It would be beneficial to have segregated modules as an option and you could buy and implement them separately. For example: trap module (proxy), audit module (search interface), storage module (store and encrypt recordings), etc.

I've been using the solution for over three years with multiple customers and installations.

The stability of the solution is good.

If your current architecture is not designed for this, then it can it may be difficult to expand beyond a certain amount. Our current biggest deployment is for thousands of users.

Technical support is brilliant. They are very helpful.

I was using other solutions in a lab environment for some demos and comparisons, but in real practice, I have not integrated other solutions.

The initial setup is quite straightforward. However, to figure out how to use it, a consultant or an integrator for new users is highly advised.

We're integrators for the solution. We help clients implement it.

Yes, I made some comparison on CyberArk, BeyondTrust, SSH and CA.

We use the on-premises deployment model. We're an integrator company for this solution.

In terms of advice, I'd say new users should involve the integrator architecture team from the beginning.  From a technical perspective, you need to have discussions with the network team from the beginning.

I'd rate the solution nine out of ten.

Flexible modes are easily integrated into the customer infrastructure. It's easy to find needed information and the indexer does a good job.

Secure replays: Balabit SCB supports multiple security officers (something like senior and junior officer), who can encrypt upstream, and downstream flows, with different SSL certificates. For example, one officer can see replays, and another officer can only see replays by pressing on a key.

When I worked in a bank, it greatly facilitated the control admins and reduced the length of investigations.

With release 4f4a, I am pleased with the changes. The developers have spent a lot of time optimizing the interface for the convenience of users and it’s functional. Now, I think the best way to improve it will be to optimize the software, because the software begins to consume more resources (physical).

I have been using Shell Control Box for more than two years.

By the new releases, I see that it uses some more resources, but this time it's not affected anything.

We have not had any scalability issues.

I rate technical support 5/5. They are quick and informative.

I tested many another products, but there was an issue about productivity, which was critical to our choice.

Initial setup was easy. There was step-by-step preinstalled software, which took two minutes.

I think it's individual by owner and product.

We evaluated CyberArk and Splunk.

Develop product functional and implementation methods.

Monitoring and controls privileged access to remote server/appliances for RDP/SSH/HTTP/ICA/VNC protocols

Four-eye authentication and gateway authentication with real-time audit capability

Credential storage and user mapping policies

Inband destination selection with DNS resolve/mapping internal resources

Detailed audit search capability into proprietary video stream for all protocols supported with keylog functions

• Improved security
• Detailed audits for support/maintenance activities done by admin/technician and third-party engineers
• Drastically reduced unauthorized and improper use of systems and servers

The only improvement would be to manage more concurrent sessions.

I have been using it for four years.

I have not encountered any stability issues.

I have encountered scalability issues. The system needs to be properly analysed before putting it into production. Supported protocols have different needs in terms of computing power, and this directly impacts the number of concurrent sessions that can be managed.

absolutely perfect

Technical support is 10/10, absolutely.

I did not previously use a different solution.

The initial setup is straightforward, but you need to have a pre-defined plan, know how to implement authentication or the authentication store if used, and also how to do network integration.

I don't know about pricing, but licensing is based on concurrent session through SCB.

Before choosing this product, I did not evaluate other options.