Version 2.7 of the BI.ZONE PAM privileged access management system introduces the ability to configure automatic password rotation schedules. The update also affects connections to dynamic infrastructure, user rights differentiation, and auditing.
Administrators can set dates and frequency for password rotation, as well as exclude specific days and time intervals. The platform automatically changes passwords and verifies their relevance. If necessary, these operations can be initiated manually.
BI.ZONE PAM supports working with Active Directory accounts, Linux clusters, Oracle, PostgreSQL, and Platform V Pangolin DB. The list of compatible systems can be expanded using custom scripts, the authenticity of which the platform verifies before execution.
The updated version also includes connections to resources by IP address or fully qualified domain name without prior addition to the system. However, access is granted only to addresses within administrator-approved ranges.
Furthermore, users now only see the objects, policies, and containers to which they have rights. Deleted accounts, roles, and scripts are saved in the database with a corresponding mark, allowing the restoration of change history during audits and incident investigations.
According to the BI.ZONE PAM team, 30–40% of privileged accounts in various systems use identical or similar passwords. Automating their regular change helps reduce the risk of attacks using compromised data.