Skip to main content
Version: 3.22

PCI Reports

Some of the PCI DSS requirements demand companies to implement controls that assign a unique identity to each person with access to a computer, as well as fully monitoring network resources and customer payment data. The purpose of these reports is to display information required by PCI standards, and thus enable the auditor to identify possible areas of non-compliance. Accessing the menu Reports ➔ PCI you will see the following reports:

Password expiration​

This report shows the expiration dates of all credentials passwords that are registered in senhasegura . This report is important for the comparison between the company's password policy and the real application of the password expiration date.

The Password expiration report will print the following information:

  • Credential: the username and password that will be detailed;

  • Device: the credential is used to access;

  • Password policy: that is configured to set the password change period;

  • Password change: status of the automatic password change;

  • Last change attempt: is the date of the last time the system tried to change the password based on the policy setted;

  • Last attempt status: shows if the last change attempt performed the change or not;

  • Last change successfully: is the date of the last time the system changed the password automatically;

  • Next change: is the date based on the policy that the password should be changed;

  • Expiration: is the date limit to perform the password change;

  • Password age: is the number of the days the password is being in use;

  • Status: shows if the password is expired or not;

Password expiration Dashboard​

It is also possible to have a general view on the number of expired passwords on the dashboard menu, to view this board access: Dashboard ➔ PAM ➔ Password changes.

Password change status

The credential quantities and their status are presented considering the following rules:

caution

Child credentials will only be considered on this dashboard if their respective parent credentials have the automatic change active. In some cases the system does not schedule a specific change for the child credential, creating and executing the change at the time of executing the parent credential change. The "Waiting" and "Error" dashs will not necessarily display the sum of "Updated" and "Expired", as they depend on the behavior of each change.

The Password expiration report will print the following information:

The following counts managed/non-managed credentials:​

  • Updated:

  • : Over 25% managed credentials
  • : 5% to 25% managed credentials
  • : Under 5% managed credentials

  • Expired:

  • : None expired
  • : At least one expired

  • Not managed:

  • : Credentials without automatic password change enabled

  • Execution status:

  • : No problems
  • : Any problem with up to 2 robots simultaneously (all active)
  • : Any problem on the 3 robots simultaneously.

The following counts expired credentials that have the "password change" flag activated:​

  • Waiting:

  • : More than 75% of managed credentials
  • : Less than 75% of managed credentials

  • Error:

  • : Without errors
  • : With at least one error

Credentials by users​

This report shows all credentials that every user registered in senhasegura system can have access. This report is relevant for the comparison between the user's access privileges set by the company's policy and current conceded privileges.

The Credentials by users report will print the following information:

  • Name: is the name of the user that will be detailed;

  • Username: is the username used to access senhasegura ;

  • Device: is the devices the user has access privileges;

  • Credential: is the credential the user has privileges to use to access the device;

  • Department: is the company's department the user belongs;

  • Access group: is the access group the user is a member;

  • Part of password: is the level of privilege the user has in relation with the credential's password: can see the complete or just a part of the password;

  • View: show if the user has permission to visualize the password;

  • View reason: shows if the user have to enter a reason to view the credential;

  • View approval: shows if the user have to be approved to view the credential;

  • Session: show if the user can perform a session using the credential;

  • Session reason: shows if the user have to enter a reason to perform a session using the credential;

  • Session approval: shows if the user have to be approved to perform a session using the credential;

Password custody​

This report shows all the passwords that are under custody of any user registered in senhasegura system. This report is relevant for the comparison between the users access privileges set by the company's policy and the current privileges and access conceded.

The Password custody report will print the following information:

  • User: is the name of the user that will be detailed;

  • Credential: is the credential under the user's custody;

  • Device: that the credential under custody access;

  • Begin of custody: is the date the user take the credential's custody;

  • Last view: is the date of the last time the user view the password;

  • End of Custody: is the date the user lost the custody over the credential;

  • Duration: is the period the credential was under the user's custody;

Password custody Dashboard​

It is also possible to have a general view on the users and the number of custody conceded on the dashboard menu, to view this board access: Dashboard ➔ PAM ➔ Custody.

Password query​

This report shows all the attempts to view a passwords by the users registered in senhasegura system. This report is relevant for the comparison between the users access privileges set by the company's policy and the current privileges and access conceded.

The Password query report will print the following information:

  • Name: is the name of the user that will be detailed;

  • User: is the username used to access senhasegura ;

  • Department: is the company's department the user belongs;

  • Status: shows if the password view is enabled for the user;

  • Total: The number of views perform by the user.;

It's also possible to see more details about the queries clicking on the action icon of the register.

Remote sessions​

This report shows the history of remote sessions performed by users registered in senhasegura system. This report is relevant for the comparison between the users access privileges to perform remote sessions set by the company's policy and the current privileges and access conceded.

The Remote sessions report will print the following information:

  • User: is the name of the user that will be detailed;

  • Credential: used by the user to perform the remote access;

  • Device: which was access and the port used;

  • Session ID: is the identification code of the particular session;

  • Start: is the day and time the session started;

  • Final: is the day and time the session finished;

  • Duration: the total time of the session;

  • Protocol: used to performed the session;

  • Origin: of the access performed;

Remote sessions Dashboard​

It is also possible to have a general view on the remote sessions performed by the users on the dashboard menu, to view this board access: Dashboard ➔ PAM ➔ Remote sessions.

Denied access​

This report shows the history of the denied access performed by users registered in senhasegura system.

This report is important for the comparison between the users access privileges to perform remote sessions set by the company's policy and the current privileges and access conceded.

The Denied access report will print the following information:

  • Operation: is the action the user attempt to perform;

  • User: is the name of the user that attempted to operate the action;

  • Credential: the user attempt to use to perform the access;

  • Device: the user attempt to access;

  • Access request: is the day the user requested the access;

  • Access rejection: is the day the approver denied the access;

  • Approvers: is the users that are selected to approve the access requests from that user;

It's also possible to see more details about the denied access clicking on the action icon of the register. % Redefinindo a pasta atual do capitulo