Gold Wire's Formulator Update Enhances Access Security and Compliance
Lets organizations meet Sarbanes-Oxley, Visa Cardholder Information Security Program requirements; secures Unix server access, file transfers, and audit trails
Walthan, Mass. -- June 29, 2004 -- Gold Wire Technology Inc. today announced the shipment of a major access security enhancement to its award-winning Formulator(R) infrastructure management solution. The new Formulator Version 3.6 expands support for demonstrating compliance to Sarbanes-Oxley and Visa's Cardholder Information Security Program (CISP) standards that are pivotal to publicly held firms and organizations with high-transaction volume networks such as retailers, banks and financial institutions.
Version 3.6 features provide highly secure UNIX server Single-Sign-On access, file transfers and complete forensic audit trails via FTP, eliminating the need to broadly distribute privileged UNIX server password information -- a common practice that presents a clear security breach under Sarbanes-Oxley and Visa CISP requirements. Formulator Version 3.6 helps organizations better assure the integrity of the infrastructure that carries financially sensitive information.
Demonstrating control over the network and IT staffs that run the infrastructure is key to passing Sarbanes-Oxley and Visa CISP audits -- yet when staffs share passwords to the root UNIX server accounts, individual operator actions cannot be verified. Formulator is an infrastructure management solution with operator access control, configuration change control, and configuration verification modules. Version 3.6 adds new capabilities to Formulator's operator access control module providing complete FTP single sign-on access, file transfer and audit trails to UNIX servers -- in addition to existing access controls and forensic audit trails on the industry's widest range of routers, switches, firewalls and other network devices. In doing so, Formulator Version 3.6 helps IT and security staffs meet Sarbanes-Oxley and Visa CISP requirements while enhancing security, business continuity and operating effectiveness.
How Formulator Controls Operator Access to UNIX Servers
Formulator Version 3.6's operator access control module acts as a gateway between IT operators and network infrastructure, providing a single sign-on capability and forensic audit trails of operator access via the Web, Telnet, SSH and FTP. Using Formulator, network management and IT staffs can create individual user accounts and still control and monitor access to privileged UNIX accounts, such as the root account. Privileged passwords are stored within Formulator and are not widely distributed. IT staff members authenticate with Formulator where their privileges are verified before they are transparently connected to the desired UNIX server, at a privileged level. All staff member activity, including keystrokes, is tracked in an audit trail for later compliance reporting.
"Network and IT operators hold the keys to the kingdom, yet few organizations have the automated systems in place today to adequately demonstrate access controls and audit trails over their activities as required by Sarbanes-Oxley and VISA CISP," said Thomas C. Browne, CEO of Gold Wire Technology. "Formulator Version 3.6 further expands our ability to help any organization with UNIX servers to better meet external standards such as SOX and VISA CISP, as well as internal control standards -- and assure the integrity of their infrastructure."
About Gold Wire Technology
Gold Wire Technology develops, sells and supports multi-vendor infrastructure integrity assurance solutions for enterprises with revenue or compliance-critical networks in the financial services, retail, automotive, healthcare and pharmaceutical industries; Federal agencies; and MSPs or ASPs serving them. Gold Wire Technology can be reached at 1-888-585-9473 or at http://www.goldwiretech.com.
Formulator and Gold Wire Technology Inc. are registered trademarks of Gold Wire Technology Inc. All other trademarks and registered trademarks in this document are the properties of their respective owners.