A top-10 Russian bank has implemented the SKDPU NT PAM platform developed by IT Bastion. The system currently manages access for over 1,000 administrators connecting to the bank's IT infrastructure, allowing security teams to monitor their activities in real time.
The platform integrates with the bank's existing SIEM system and a fault-tolerant two-factor authentication service. It enables centralized access control for servers, databases, and applications based on user roles, connection time, and protocols, without requiring agents on target devices.
The bank utilizes a specific workflow for temporary access requests, where developers must provide a ticket number and justification for approval. This ensures that permanent access is not granted for one-time tasks, while all session actions are recorded for audit purposes.
To enhance security, the bank implemented multi-factor authentication via a mobile app for remote work and file transfers. The system connects to RADIUS servers via a virtual IP address to ensure high availability, automatically rerouting requests if a server fails.
IT Bastion CEO Sergey Bochkarev noted that the project demonstrates the platform's ability to adapt to complex existing infrastructures. The bank's operations team also receives ongoing technical support, including software updates and configuration consulting.
