100

100

4 cores

8 GB

100 GB

1000 GB

200

200

4 cores

8 GB

100 GB

1000 GB

500

500

8 cores

16 GB

100 GB

2000 GB

5000

2000

8 cores

16 GB

100 GB

2000 GB

Identity authentication

Two-factor authentication for user accounts

• CBH allows you to configure multi-factor authentication, such as mobile phone one-time passwords (OTPs), mobile phone SMS messages, USB keys, and dynamic OTP tokens to authenticate user identities.

Supported

Supported

Remote authentication for user accounts

• CBH also allows you to authenticate user identities through AD, RADIUS, and LDAP remote authentication.

Supported

Supported

Permission control

System access permission

• CBH allows you to configure department- and role-based permission control so that you can allow a specific system user to access a specific module in a given CBH system.

Supported

Supported

Resource access permission

• CBH allows you to configure resource access control policies based on users, user groups, managed accounts, and account groups to limit what resources can be assessed. You can also configure two-person authorization policies and command control policies to limit what operations are allowed on a certain resource.

Supported

Supported

Two-person authorization

• CBH allows you to configure two- or multi-person authorization for core sensitive resources.

Supported

Supported

Character command interception

• CBH allows you to configure command control policies to dynamically authorize key operations on character protocol resources.

Supported

Supported

Database command interception

• CBH allows you to configure database control policies to precisely restrict and re-review sensitive and risky database operations.

Not supported

Supported

Account management

User lifecycle management

• CBH allows you to create a single user account, import user accounts in batches, manage user accounts in batches, and manage user groups.

Supported

Supported

Managed account lifecycle

• CBH allows you to add resources and their accounts one by one or in batches, and classify added accounts into different groups for management.

Supported

Supported

Host management

• CBH allows you to manage Linux or Windows hosts with the SSH, RDP, VNC, Telnet, FTP, SFTP, SCP, or Rlogin protocol configured.

Supported

Supported

Application management

• CBH allows you to manage browser or client application resources, such as Google Chrome, Internet Explorer, Mozilla Firefox, Oracle Tool and MySQL.

Supported

Supported

Database host management

• CBH allows you to manage DB2, MySQL, SQL Server, and Oracle databases.

Not supported

Supported

Automatic password change for managed accounts

• CBH allows you to configure password change policies to let the system periodically change passwords of managed accounts.

Supported

Supported

Automatic synchronization of managed resource accounts

• CBH allows you to configure account synchronization policies to let the system detect zombie accounts or unmanaged accounts in a timely manner.

Not supported

Supported

Operation audit

System login and operation logging

• CBH allows you to export system logs, generate system reports, and configure alarm notifications.

Supported

Supported

Resource O&M audit

• CBH allows you to audit the entire O&M process through multiple audit methods, such as monitoring on-going sessions, generating videos for history sessions, exporting text reports, and remote log backup.

Supported

Supported

Database operation audit

• CBH allows you to audit the entire database O&M process based on operation commands.

Not supported

Supported

OCR audit technology

• CBH uses the OCR technology to recognize and convert images to be audited into text files, making it easier for you to audit O&M images.

Not supported

Supported

Efficient O&M

One-stop web browser O&M

• CBH allows you to remotely log in to resources without having to install a client with integrated functions, such as batch login, collaborative session, file transfer, and command group sending.

Supported

Supported

Third-party client O&M

• CBH can interconnect with multiple O&M tools with just a few clicks, including SSH, FTP, SFTP, and SCP client.

Supported

Supported

Database O&M

• CBH allows you to log in to the target databases using the single sign-on (SSO) tool with just a few clicks.

Not supported

Supported

Automatic O&M

• CBH allows you to manage scripts online and let the system periodically execute preset O&M tasks.

Not supported

Supported

Ticket application

Access and command authorization ticket application

• CBH allows system users to obtain the resource control permissions by manually or automatically triggering a system ticket and submitting the ticket to the system administrator for approval.

Supported

Supported

Database authorization ticket application

• CBH automatically generates an authorization ticket for each sensitive operation from a system user. The system user then needs to submit the ticket to the administrator for approval. The sensitive operation can be resumed only after the application is approved.

Not supported

Supported