What's new 2019

The Alero connector can now be deployed on a wider range of operating systems. In addition to Ubuntu 18.04, the connector can be deployed on Red Hat Enterprise Linux v7.6.

This version improves the user experience in sessions, enabling vendors to upload files from their local workstations to remote targets, and download files from remote targets to their local workstations. Users can drag a file into the remote session window to make it accessible on a network drive on the remote machine. Placing a file in a downloads folder on that network drive will automatically download it to the user's workstation. A security control allows organizations to restrict the ability to transfer files.

Back end security and performance improvements.

Reduces the amount of manual steps, allowing a simpler and quicker installation. Additionally, we added a new walkthrough in the portal.

We have added more restrictions and control for tenant administrators who need to test connections to PAS.

This page shows historical events from your Alero tenant.

This version includes full functionality. There may be minor functionality and UI issues.

If a new token is generated for the same site, or a connector is manually reset via the CLI, the certificate is saved locally to prevent unnecessary renewals.

A new phone number can register with the Alero SaaS service once per hour. This is a security layer to prevent anyone from brute-force guessing the SMS verification code.

If the Alero mobile app is re-installed from a pre-existing phone number, the user will be offered the ability to restore the previous account after authenticating the restore token that was set during initial registration.

The Alero connector can validate application and nested application (PVWA and PSM HTML5 GW) certificates. For more information see Add applications.

Ensure that remote vendors are authenticated each time they need to access critical assets without the need to share passwords

Providing third party vendors with sweeping access leaves organizations vulnerable and unable to verify for certain who is accessing what. Alero enforces Zero Trust access to the sensitive systems managed by CyberArk so that all interactions are verified and audited – without the need for VPNs, agents or passwords. Neither the password to Core PAS, nor the password to the remote systems managed by CyberArk, are ever exposed to the vendor or ever reach their workstations. Using a unique smartphone application, Alero mobile performs biometric authentication of the user and a simultaneous scan of a unique QR code generated by the Alero web page.

Simplify the provisioning of remote vendor users to CyberArk Privileged Access Security

Granting or maintaining unneeded standing access for external users is a risky proposition for organizations. Securing this process requires cumbersome manual processes or well- designed automatic ones. With Alero, vendors do not have to be added to the organization's identity management system to gain access to PAS, as Alero handles the user provisioning process so that vendors gain secure and quick access – but, only for what they need, at the right times and for the required amount of time. Alero is configured as a SAML identity provider (IDP) and also as an OpenLDAP server to facilitate Alero configured user provisioning to the web-based portal and the CyberArk Vault.

Alero provides invite-based registration to Core PAS and allows organizations to delegate privileges to vendors so they can self-manage the onboarding process.

Utilize smartphone capabilities to confirm remote vendor identity through inherent authentication methods

Using passwords, tokens and hashes to verify identity leaves the door open for attackers to masquerade as privileged insiders. Alero leverages strong biometric authentication via smart phones, including other factors, to authenticate authorized remote vendors to the CyberArk Privileged Access Security (PAS) solution. No need to share credentials with PAS or VPN solutions to grant access.

Gain full visibility into remote vendor activities and get complete reporting, auditing and remediation capabilities

Without knowing who is accessing what, it can be hard to verify that the environment is safe. Alero integrates with Privileged Access Security to add an additional layer of security for privileged access. This integration provides full audit capabilities and session isolation for sensitive assets that remote vendors access, as well as introducing alerting and remediation based on risk scores.