[](https://www.paloaltonetworks.com/idira?ts=markdown) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![Idira logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/idira-logo-dark.svg)](https://www.paloaltonetworks.com/idira?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * [](https://www.paloaltonetworks.com/idira?ts=markdown) * 解决方案 ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) 解决方案 [人类身份](https://www.paloaltonetworks.cn/idira/human?ts=markdown) * [特权访问管理](https://www.paloaltonetworks.cn/idira/human/privileged-access-management?ts=markdown) * [身份和访问管理](https://www.paloaltonetworks.cn/idira/human/identity-and-access-management?ts=markdown) * [端点特权管理器](https://www.paloaltonetworks.cn/idira/human/endpoint-privilege-manager?ts=markdown) * [身份监管](https://www.paloaltonetworks.cn/idira/human/identity-governance?ts=markdown) * [工作人员密码管理](https://www.paloaltonetworks.cn/idira/human/workforce-password-management?ts=markdown) * [供应商权限访问](https://www.paloaltonetworks.cn/idira/human/vendor-privileged-access?ts=markdown) [机器身份](https://www.paloaltonetworks.cn/idira/machine?ts=markdown) * [机密管理](https://www.paloaltonetworks.cn/idira/machine/secrets-management?ts=markdown) * [统一机密监管](https://www.paloaltonetworks.cn/idira/machine/unified-secrets-governance?ts=markdown) * [发送应用程序凭据](https://www.paloaltonetworks.cn/idira/machine/application-credentials-delivery?ts=markdown) [智能体身份](https://www.paloaltonetworks.cn/idira/agentic?ts=markdown) \[![用 Idira 保护下一批具有自主和自我推理能力的智能体](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/nav-agentic-banner.jpg) 用 Idira 保护下一批具有自主和自我推理能力的智能体 身份在确保人工智能安全方面所发挥的作用\](https://www.paloaltonetworks.cn/idira/agentic ?ts=markdown) * [资源](https://www.paloaltonetworks.com/blog/identity-security/?ts=markdown) * 资源 ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) 资源 资源 * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia/identity-security) * [在线社区](https://live.paloaltonetworks.com/) * [技术文档](https://docs.paloaltonetworks.com) * [支持](https://support.paloaltonetworks.com/Support/Index) * [技术合作伙伴](https://www.paloaltonetworks.com/partners/technology-partners) * [客户成功](https://www.paloaltonetworks.com/idira/customer-stories) * [资源中心](https://www.paloaltonetworks.cn/resources?ts=markdown) * [事件](https://events.paloaltonetworks.com) [博客 获得有关现代威胁和趋势方面的专家见解 了解更多](https://www.paloaltonetworks.com/blog/identity-security/) [Idira 实战记录 了解我们的人工智能平台如何实时阻止威胁。 了解更多](https://www.paloaltonetworks.com/idira/request-demo) [客户案例 了解领先的组织如何应对身份带来的挑战。 了解更多](https://www.paloaltonetworks.com/idira/customer-stories) * 联系我们 ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) 联系我们 联系我们 * [申请演示](https://www.paloaltonetworks.com/idira/request-demo) * [联系我们](https://www.paloaltonetworks.cn/company/company?ts=markdown) * [寻找合作伙伴](https://technologypartners.paloaltonetworks.com/English/directory) * [加入我们的社区](https://live.paloaltonetworks.com/) * * [申请演示](https://www.paloaltonetworks.com/idira/request-demo) ![palo alto networks logo icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default.svg) ![white arrow icon pointing left to return to main Palo Alto Networks site](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) [](https://www.paloaltonetworks.com/idira?ts=markdown) 搜索 Close search modal Idira 特权访问 管理解决方案 === Idira^®^ 将 PAM 基础与零常驻特权统一，以消除持续的攻击面，并对每个用户从第一次身份验证到最后一次特权操作提供保护。 * [获取电子书](https://www.paloaltonetworks.com/resources/ebooks/secure-every-identity-with-the-correct-privilege-controls) ![PAM Hero Banner](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/privileged-access-management/PAM-hero.webp) 挑战 解决方案 关键能力与特性 优势与价值客户Idira 实战记录 [挑战](#challenges) [解决方案](#solutions) [关键能力与特性](#key-capabilities) [优势与价值](#why-now) [客户](#customers) [Idira 实战记录](#contact-us) {#challenges} 挑战 ## 弥合不受控特权缺陷 传统 PAM 保护享有特权的少数人，但攻击者会攻击其他所有人。攻陷普通帐户，进行横向移动，并利用 IAM、PAM 与端点管控之间的缝隙，最终渗透至特权系统。 碎片化工具的结构性差距 ![碎片化工具的结构性差距](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/privileged-access-management/pam-icon-1.svg) ### 碎片化工具的结构性差距 70% 的安全漏洞通过身份运行，因为断开的系统创建了独立的数据模型和策略引擎，攻击者可以轻松绕过。 常驻特权是一种负担 ![常驻特权是一种负担](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/privileged-access-management/pam-icon-2.svg) ### 常驻特权是一种负担 常驻的访问权限会形成一个永久的攻击面。被盗的凭据和持续的访问是大多数安全漏洞的主要原因。 普遍的特权现实 ![普遍的特权现实](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/privileged-access-management/pam-icon-3.svg) ### 普遍的特权现实 特权不再仅仅属于少数管理员。每个身份都基于他们可以接触的内容而拥有特权，但大多数身份受到为少数用户设计的控制措施的保护。 第三方盲区 ![第三方盲区](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/privileged-access-management/pam-icon-4.svg) ### 第三方盲区 外部供应商往往比内部员工拥有更高的权限，且受到的监管更少，这导致他们引发了近 29% 的身份安全漏洞。 传统 PAM 系统复杂性所带来的沉重负担 ![传统 PAM 系统复杂性所带来的沉重负担](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/privileged-access-management/pam-icon-5.svg) ### 传统 PAM 系统复杂性所带来的沉重负担 针对本地和云端环境，手动轮换密码以及互不相连的保管库，不仅会制造安全盲区，还会带来严重的操作摩擦，从而拖慢企业数字化转型的步伐。 未受管控的零级特权与本地管理员风险 ![未受管控的零级特权与本地管理员风险](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/privileged-access-management/pam-icon-6.svg) ### 未受管控的零级特权与本地管理员风险 攻击者利用未受管理的根账户和本地管理员权限来提升特权。保持这些入口点开放会为横向移动创造持久的立足点。 {#solutions} 解决方案 ## 现代特权访问管理 在您的整个基础设施中保护从员工用户到云工程师的所有人类身份的安全。Idira PAM 解决方案将保管、零常设特权和会话隔离统一为单一的执行体验，以消除攻击者重复使用的凭证。 ## 零常设特权 (ZSP) 消除持久访问的基础风险。临时特权仅在任务开始时创建，并在工作结束时自动销毁，不留下任何攻击者可以窃取或滥用的东西。 ## 确保基础设施和云访问的安全 实现对 AWS、Azure、GCP 以及 Kubernetes 的无代理、中介式访问支持本地 CLI 和控制台工作流，使用即时权限替代静态的、长期存在的 IAM 角色。 ## 员工终端特权安全 消除 Windows、macOS 和 Linux 上的常设本地管理员权限。用按需应用程序提权来取代现有做法，在访问的初始阶段就彻底阻断黑客的横向移动和凭证窃取。 ## 智能会话控制与审核 在基础设施和 SaaS 中隔离并记录每个敏感会话。AI 生成的摘要实时呈现异常命令，在损害发生之前阻止身份滥用。 ## 保护第三方和供应商访问 消除外部承包商对 VPN 和堡垒机的依赖。提供基于浏览器的 JIT 访问权限，该权限严格限定于特定任务，并具备完整的会话录制功能，以满足审核与合规要求。 {#key-capabilities} 现代 PAM 控制 ## 从端点到会话的分层、自适应特权控制 从静态、常设特权转变为动态、风险对齐的控制。Idira 将保管、ZSP 和端点安全统一为一个操作模型，以保护每个身份的安全。 *** ** * ** *** Volume Play *** ** * ** *** * 零常设特权 * 基础架构访问权限 * 端点安全 * 会话情报 * 保管与轮换 * 身份威胁检测与响应 选择一个主题零常设特权基础架构访问权限端点安全会话情报保管与轮换身份威胁检测与响应 ### 仅在工作存在时存在的临时访问权限 完全移除常设访问。系统会创建"感知背景信息"的临时特权，该特权仅在任务执行期间有效，并在任务结束后自动销毁，从而彻底消除被攻击者利用的休眠凭证。 ### 对云环境和 Kubernetes 的原生、无代理访问 通过原生 CLI 和控制台安全访问 AWS、Azure、Google Cloud 和 Kubernetes。使用无代理会话中介和 JIT 授权消除对 VPN 和堡垒机的依赖，同时保持完整的审核记录。 ### 在不破坏工作流程的情况下移除本地管理员权限。 通过在 Windows、macOS 和 Linux 上移除本地管理员权限来保护访问的最初阶段。用基于策略的提升替代它们，以阻止横向移动和凭证收集。 ### 隔离并监控每一个特权操作。 对跨基础设施和 SaaS 的特权会话进行代理与隔离。人工智能生成的摘要实时呈现异常命令，缩小身份验证与操作之间的审核差距。 ### 自动化凭证管理以提供有效的防御 通过自动化凭证保管和轮换，保护关键系统级账户。Idira 将传统保管与 JIT 工作流连接起来，使向零常驻特权模型的逐步过渡成为可能。 ### 实时识别并阻止基于身份的攻击 使用原生 ITDR 分析身份领域中的信号。当检测到可疑的横向移动或保管库批量窃取行为时，系统会自动终止高风险会话，或提升身份验证要求。 {#why-now} * 89% 在 89% 的 Unit 42 调查中，身份是弱点的案例。Idira 通过保护 65% 由身份欺骗技术驱动的初始访问来填补这一空白^[1](#inline-stats-sources1)^ * 88% 88% 的泄露事件涉及凭据被盗。我们通过防范网络钓鱼的身份验证和零常驻特权来消除表面风险^[2](#inline-stats-sources2)^ * 12 小时 工具碎片化使每个事件的响应时间平均延迟 12 小时。Idira 统一了 IAM、PAM 和 IGA，从而消除阻碍安全遏制的盲区^[3](#inline-stats-sources3)^ 优势与价值 ## 从端点到任何目标的动态分层控制 从静态的常驻特权，转向分层、自适应的防御体系。Idira 将端点控制、保管和零静态特权统一为一个操作模型，以保护每一个人类身份。 {#customers} 客户 [![Northern Trust](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/customers/northerntrust-white-nospace.svg)](https://www.paloaltonetworks.com/customers/northern-trust) [![optiv logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/identity-and-access-management/section-7.1.svg)](https://www.paloaltonetworks.com/customers/optiv) [![carnival logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/customers/carnival-corporation/carnival-logo.svg)](https://www.paloaltonetworks.com/customers/carnival-corporation) [![Repsol Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/customers/repsol/02-1-repsol-logo-62x62.svg)](https://www.paloaltonetworks.com/customers/repsol) [![Transgourmet logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/customers/Transgourmet_logo-small-white.png)](https://www.paloaltonetworks.com/customers/transgourmet-france) [![Maximus](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/customers/maximus/maximus.svg)](https://www.paloaltonetworks.com/customers/maximus) [![Cococola logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/customers/Coca-Cola_Europacific_Partners.svg)](https://www.paloaltonetworks.com/customers/coca-cola-europacific-partners) [![Panasonic](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/case-study/panasonic/panasonic-logo.svg)](https://www.paloaltonetworks.com/customers/panasonic-information-systems) {#contact-us} 联系我们 ## Idira 实战记录 咨询专家，今天就开始行动。 名字姓氏电子邮件公司职位职位Job RoleSelect a job function手机国家/地区国家/地区状态状态ProvinceProvince邮政编码部门 继续继续 注册即可接收有关 Palo Alto Networks 及其合作伙伴的新闻、产品更新、销售推广、活动信息和特别优惠。 提交此表格，即表示我了解我的个人数据将按照 Palo Alto Networks [隐私政策](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)和[使用条款](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)进行处理。 返回 注册 ## 谢谢大家！ Palo Alto Networks 专家将很快与您联系。期待尽快与您交流！ 资源 ## 基础信息和资源 解决方案简介 电子书 网络研讨会 博客 [![Modern Privileged Access Management](https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/idira-privileged-access-mgmt-aag.pdf.transform/resourceRedesign/image.png) ![mobile Modern Privileged Access Management](https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/idira-privileged-access-mgmt-aag.pdf.transform/resourceRedesign/image.png) 解决方案摘要 Modern Privileged Access Management](https://www.paloaltonetworks.com/resources/datasheets/privileged-access-management) [![Human Identity Security](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/human-identity-security.png) ![mobile Human Identity Security](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/human-identity-security.png) 解决方案摘要 Human Identity Security](https://www.paloaltonetworks.com/resources/techbriefs/human-identity-security) [![Moving from Self-Hosted to SaaS](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/stop-managing-infrastructure-start-managing-risk.png) ![mobile Moving from Self-Hosted to SaaS](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/stop-managing-infrastructure-start-managing-risk.png) 解决方案摘要 Moving from Self-Hosted to SaaS](https://www.paloaltonetworks.com/resources/techbriefs/stop-managing-infrastructure-start-managing-risk) [![Secure Vendor Privilged Access](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/privileged-access-management/vendor-pam.png) ![mobile Secure Vendor Privilged Access](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/privileged-access-management/vendor-pam.png) 解决方案摘要 Secure Vendor Privilged Access](https://www.paloaltonetworks.com/resources/techbriefs/vendor-pam) [![2026 Identity Security Landscape](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/resources/solution-brief.png) ![mobile 2026 Identity Security Landscape](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/resources/solution-brief.png) 报告 2026 Identity Security Landscape](https://www.paloaltonetworks.com/idira/idira-identity-security-landscape) PreviousNext [![Secure Every Identity with the Correct Privilege Controls](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/thumbnails/secure-every-identity-with-the-correct-privilege-controls.png) ![mobile Secure Every Identity with the Correct Privilege Controls](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/thumbnails/secure-every-identity-with-the-correct-privilege-controls.png) 电子书 Secure Every Identity with the Correct Privilege Controls](https://www.paloaltonetworks.com/resources/ebooks/secure-every-identity-with-the-correct-privilege-controls) [![PAM Buyer's Guide to Smart Privileged Identity Controls](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/privileged-access-management/pam-resources-ebook-2.png) ![mobile PAM Buyer's Guide to Smart Privileged Identity Controls](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/privileged-access-management/pam-resources-ebook-2.png) 电子书 PAM Buyer's Guide to Smart Privileged Identity Controls](https://www.paloaltonetworks.com/resources/ebooks/buyers-guide-to-smart-privileged-identity-controls) [![Self-Hosted to SaaS Migration](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/stop-managing-infrastructure-start-managing-risk.png) ![mobile Self-Hosted to SaaS Migration](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/stop-managing-infrastructure-start-managing-risk.png) 电子书 Self-Hosted to SaaS Migration](https://www.paloaltonetworks.com/resources/techbriefs/stop-managing-infrastructure-start-managing-risk) [![Find Risk and Fix it Fast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/human/thumbnail-find-risk-and-fix-it-fast.webp) ![mobile Find Risk and Fix it Fast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/human/thumbnail-find-risk-and-fix-it-fast.webp) 电子书 Find Risk and Fix it Fast](https://www.paloaltonetworks.com/resources/ebooks/ispm) [![Secure Third-Party Access to Critical Systems](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/ai-agents-as-third-party-risk-and-insider-threats.png) ![mobile Secure Third-Party Access to Critical Systems](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/ai-agents-as-third-party-risk-and-insider-threats.png) 电子书 Secure Third-Party Access to Critical Systems](https://www.paloaltonetworks.com/resources/ebooks/ai-agents-as-both-third-party-risk-and-insider-threat) [![Beyond the Login: Modern Identity Security for the Workforce](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/modren-identity-and-management-for-your-workforce-thumbnail.png) ![mobile Beyond the Login: Modern Identity Security for the Workforce](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/modren-identity-and-management-for-your-workforce-thumbnail.png) 电子书 Beyond the Login: Modern Identity Security for the Workforce](https://www.paloaltonetworks.com/resources/ebooks/modern-identity-security-for-the-workforce) PreviousNext [![The Future of Privilege: One Platform for Every Environment](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/secrets-management/secrets-manager-9.png) ![mobile The Future of Privilege: One Platform for Every Environment](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/secrets-management/secrets-manager-9.png) 网络研讨会 The Future of Privilege: One Platform for Every Environment](https://www.paloaltonetworks.com/resources/webcasts/the-future-of-privilege-one-platform-every-environment) [![Privilege Blind Spots Part 1: Uncover Risk from Siloed Identity Tools](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/secrets-management/secrets-manager-9.png) ![mobile Privilege Blind Spots Part 1: Uncover Risk from Siloed Identity Tools](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/secrets-management/secrets-manager-9.png) 网络研讨会 Privilege Blind Spots Part 1: Uncover Risk from Siloed Identity Tools](https://www.paloaltonetworks.com/idira/privileged-blind-spots-uncover-risk-from-siloed-identity-tools-webinar) [![Privilege Blind Spots Part 2: Eliminate Unseen Workforce Risks](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/secrets-management/secrets-manager-9.png) ![mobile Privilege Blind Spots Part 2: Eliminate Unseen Workforce Risks](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/secrets-management/secrets-manager-9.png) 网络研讨会 Privilege Blind Spots Part 2: Eliminate Unseen Workforce Risks](https://www.paloaltonetworks.com/resources/webcasts/privilege-blind-spots-part-2-eliminate-unseen-workforce-risks-with-smart-controls) PreviousNext [![Idira Identity Security](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/resources/blog.png) ![mobile Idira Identity Security](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/idira/resources/blog.png) 博客 Idira Identity Security](https://www.paloaltonetworks.com/blog/identity-security/) 常见问题 关于 Idira 特权访问管理 (PAM) 的常见问题 --- 了解 Idira 如何将 IAM、PAM 和 IGA 统一为一个平台，以保护每个人类身份，从首次认证到最后一次特权操作。 什么是不受管控的特权差距？ 不受管控的特权差距，存在于已受 PAM 保护的高风险身份与缺乏特权管控的普通员工之间，这一危险的缝隙正是安全体系的致命隐患。因为每个人类身份------无论是市场经理、开发人员还是承包商------都基于他们接触的数据和目标拥有特权，攻击者利用这个差距进行横向移动。Idira 通过在每个人类身份上始终如一地应用企业级特权控制来弥补这一差距。 零常驻特权 (ZSP) 与即时 (JIT) 访问有何不同？ JIT 是一种机制，允许在设定的时间窗口内启用现有特权，而 ZSP 是一种操作模型，身份默认没有任何权限。在 ZSP 模型下，需求时会评估背景信息和风险，以创建仅在任务持续期间存在的临时特权。一旦工作完成，特权会自动被销毁，不留下任何常驻凭据或持久权限供攻击者窃取或重用。 为什么我们应该将 IAM、PAM 和 IGA 整合到一个平台中？ 碎片化的工具从来不是一种策略，它们只是创建了不连贯的数据模型和策略引擎的补丁工作。攻击者在这些孤岛之间的缝隙中活动，绕过 IAM 控制，同时持有 IGA 尚未审核的过多权限。将这些整合到 Idira 的统一操作模型中，确保发现信息能够指导访问控制，而访问控制又能指导治理，形成一个连续的动作，阻止基于身份的攻击。 Idira PAM 如何支持零信任架构？ 零信任在没有统一身份层的情况下结构上是不可能的。Idira 通过根据实时背景信息评估每个访问请求，强制执行最小权限，并通过持续会话监控假设存在漏洞，从而为零信任提供基础。通过统一身份层，Idira 确保从第一次身份验证到最后一次特权操作，零信任原则在云、SaaS 和本地环境中得到一致执行。 Idira 能够实现身份治理以及入职-调岗-离职生命周期的自动化吗？ 可以，Idira 使用人工智能驱动的生命周期自动化，实时授予正确的访问权限并进行治理。入职、调岗、离职者事件会同时触发对权限和保管凭证的自动调整，防止"身份安全债务"。人工智能通过分析用户行为来定义符合其岗位需求的权限，从而进一步减少人工繁琐操作。这不仅能将需要人工审核的权限削减 75%，还能确保新用户在数小时内（而非数天）完成权限配置。 什么是特权访问管理 (PAM)？ 特权访问管理 (PAM) 是一种安全机制，专门用于管理、控制和监控对组织最核心资源的提权访问。传统的 PAM 通常只关注 IT 管理员，而 Idira 建立了新一代身份安全操作模型，将这些企业级控制扩展到每个拥有特权的人类身份，包括开发人员、承包商和员工，从第一次身份验证到最后一次特权操作，始终都在保护他们的安全。 如何保管密码和保护凭证？ 保管涉及将敏感凭据存储在一个集中、不可篡改的存储库中，凭据在这里会被加密并自动轮换以防止被盗。Idira 利用这些经过验证的基础，并将其与现代的即时 (JIT) 和零常设特权 (ZSP) 工作流连接起来。这确保了即使是那些不支持现代联邦认证的应用程序，用户也永远无需接触真实凭证。系统会在登录时自动注入凭证，从而有效缩小攻击面。 Idira 在保护 IT 管理员时，是否采用了与标准用户不同的方式？ Idira 在所有身份上采用一致的安全原则，但根据访问的目标使用风险自适应控制。IT 管理员通常需要对关键基础设施进行深度会话隔离和命令级监控。然而，Idira 通过认识到每个身份都携带特权，消除了"管理员"和"标准"用户之间的隔阂。它保护每个人，而无关其是 IT 管理员还是员工，确保他们默认以最小权限操作，并向零静态特权模型过渡。 Idira 如何在没有 VPN 的情况下保护第三方供应商和承包商？ Idira 消除了对风险高、长期存在的 VPN 连接和静态账户的需求。相反，它提供了基于浏览器的无代理访问，这与您的内部网络隔离。外部身份仅获得与当前任务严格相关的及时 (JIT) 访问，每个会话都被隔离并记录，以便进行完整的审核跟踪。这确保了占泄露事件近 29% 的第三方访问与内部员工身份一样受到严格管理。 Show more + * ^1.^[2026 年全球事件响应报告](https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report?ts=markdown)，作者是 Palo Alto Networks。 * ^2.^[2025 年数据泄露调查报告](https://www.verizon.com/business/resources/infographics/2025-dbir-smb-snapshot.pdf) * ^3.^[2026 年身份安全格局](https://www.paloaltonetworks.com/idira/idira-identity-security-landscape)，作者是 Palo Alto Networks。 {#footer} 产品和服务 * [实时人工智能驱动的网络安全](https://www.paloaltonetworks.cn/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.cn/precision-ai-security/secure-ai-by-design?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.cn/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.cn/sase/ai-access-security?ts=markdown) * [云交付的安全服务](https://www.paloaltonetworks.cn/network-security/security-subscriptions?ts=markdown) * [高级威胁预防](https://www.paloaltonetworks.cn/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.cn/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.cn/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.cn/network-security/advanced-dns-security?ts=markdown) * [企业数据丢失防护](https://www.paloaltonetworks.cn/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.cn/network-security/enterprise-iot-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.cn/network-security/medical-device-security?ts=markdown) * [工业 OT 安全](https://www.paloaltonetworks.cn/network-security/industrial-ot-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.cn/sase/saas-security?ts=markdown) * [新一代防火墙](https://www.paloaltonetworks.cn/network-security/next-generation-firewall?ts=markdown) * [硬件防火墙](https://www.paloaltonetworks.cn/network-security/hardware-firewall-innovations?ts=markdown) * [软件防火墙](https://www.paloaltonetworks.cn/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.cn/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.cn/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.cn/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.cn/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.cn/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.cn/sase?ts=markdown) * [应用加速](https://www.paloaltonetworks.cn/sase/app-acceleration?ts=markdown) * [自主数字体验管理](https://www.paloaltonetworks.cn/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.cn/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.cn/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.cn/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.cn/sase/sd-wan?ts=markdown) * [远程浏览器隔离](https://www.paloaltonetworks.cn/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.cn/sase/saas-security?ts=markdown) * [基于 AI 的安全运营平台](https://www.paloaltonetworks.cn/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.cn/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.cn/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.cn/cortex/cloud/application-security?ts=markdown) * [云态势安全](https://www.paloaltonetworks.cn/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.cn/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.cn/prisma/cloud?ts=markdown) * [人工智能驱动的 SOC](https://www.paloaltonetworks.cn/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.cn/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.cn/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.cn/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.cn/cortex/cortex-xpanse?ts=markdown) * [Unit 42 托管检测和响应](https://www.paloaltonetworks.cn/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.cn/cortex/managed-xsiam?ts=markdown) * [新一代身份安全](https://www.paloaltonetworks.cn/idira?ts=markdown) * [特权访问管理](https://www.paloaltonetworks.cn/idira/human/privileged-access-management?ts=markdown) * [身份和访问管理](https://www.paloaltonetworks.cn/idira/human/identity-and-access-management?ts=markdown) * [端点特权管理器](https://www.paloaltonetworks.cn/idira/human/endpoint-privilege-manager?ts=markdown) * [身份监管](https://www.paloaltonetworks.cn/idira/human/identity-governance?ts=markdown) * [工作人员密码管理](https://www.paloaltonetworks.cn/idira/human/workforce-password-management?ts=markdown) * [智能体身份](https://www.paloaltonetworks.cn/idira/agentic?ts=markdown) * [机密管理](https://www.paloaltonetworks.cn/idira/machine/secrets-management?ts=markdown) * [统一机密监管](https://www.paloaltonetworks.cn/idira/machine/unified-secrets-governance?ts=markdown) * [应用程序凭证交付](https://www.paloaltonetworks.cn/idira/machine/application-credentials-delivery?ts=markdown) * [供应商特权访问](https://www.paloaltonetworks.cn/idira/human/vendor-privileged-access?ts=markdown) * [威胁情报和事件响应服务](https://www.paloaltonetworks.cn/unit42?ts=markdown) * [主动评估](https://www.paloaltonetworks.cn/unit42/assess?ts=markdown) * [事件响应](https://www.paloaltonetworks.cn/unit42/respond?ts=markdown) * [转变您的安全策略](https://www.paloaltonetworks.cn/unit42/transform?ts=markdown) * [发现威胁情报](https://www.paloaltonetworks.cn/unit42/threat-intelligence-partners?ts=markdown) 公司 * [关于我们](https://www.paloaltonetworks.cn/about-us?ts=markdown) * [人才招聘](https://jobs.paloaltonetworks.com/en/) * [联系我们](https://www.paloaltonetworks.cn/company/contact-sales?ts=markdown) * [企业责任](https://www.paloaltonetworks.com/about-us/corporate-responsibility) * [客户](https://www.paloaltonetworks.cn/customers?ts=markdown) * [投资者关系](https://investors.paloaltonetworks.com/) * [位置](https://www.paloaltonetworks.com/about-us/locations) * [新闻资讯](https://www.paloaltonetworks.cn/company/newsroom?ts=markdown) 热门链接 * [博客](https://www.paloaltonetworks.com/blog/?lang=zh-hans) * [社区](https://www.paloaltonetworks.com/communities) * [内容库](https://www.paloaltonetworks.cn/resources?ts=markdown) * [网络百科](https://www.paloaltonetworks.com/cyberpedia) * [事件中心](https://events.paloaltonetworks.com/) * [管理电子邮件首选项](https://start.paloaltonetworks.com/preference-center) * [产品清单](https://www.paloaltonetworks.cn/products/products-a-z?ts=markdown) * [产品认证](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance) * [报告漏洞](https://www.paloaltonetworks.com/security-disclosure) * [网站地图](https://www.paloaltonetworks.cn/sitemap?ts=markdown) * [技术文档](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [请勿出售或分享我的个人信息](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [隐私](https://www.paloaltonetworks.com/legal-notices/privacy) * [信任中心](https://www.paloaltonetworks.com/legal-notices/trust-center) * [使用条款](https://www.paloaltonetworks.com/legal-notices/terms-of-use) * [文档](https://www.paloaltonetworks.com/legal) 版权所有 © 2026 Palo Alto Networks。保留所有权利 * [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://unit42.paloaltonetworks.com/unit-42-threat-vector-podcast/) * CN Select your language