The Challenge:
A mid-size MSSP needed the ability to share jumpboxes for their support team. The jumpboxes would be connected to customer networks, so the devices could only use local accounts.
The option to create a unique local account on every jumpbox would add administrative overhead because every time the team changed the local account on each jumpbox, it would need to be added or deleted.
Also, it would require the team members to manage the individual local account password, adding additional requirements.
The Solution:
The team chose to utilize ZuPAM to help manage this scenario. Local shared accounts were created on the jumpboxes and ZuPAM was used to manage those accounts. Now when a team member needs to access a jumpbox, they simply check out the password for the shared account to connect.
ZuPAM changes the password after each request and also rotates the passwords weekly even if they are not used. ZuPAM provides the auditing so that individual accountability is maintained for each connection.
Results:
The configuration took less than 2 hours to complete and since the introduction of ZuPAM in April of 2025, the following statistics are available:
Key Benefits: