-
Título
Safeguard Sessions Appliance join feature in Safeguard -
Descripción
The Asset Administrator can now join a Safeguard Sessions Appliance with a standalone primary Safeguard for Privileged Passwords Appliance. Once joined, all sessions are recorded via the Safeguard Sessions Appliance and the embedded sessions module for Safeguard for Privileged Passwords is no longer available.
The user initiates the join by connecting to the Safeguard Sessions Appliance over SSH, selecting Join to SPP, and providing the requested information. After the join is complete, the user restarts the desktop client to complete the connection and update settings and entitlement policy details.
Sessions recorded prior to joining the Safeguard Sessions Appliances are available to playback from local storage and in accordance with the permissions of the Safeguard for Privileged Passwords Appliance. Sessions that are archived are also available to playback.
CAUTION: The SPS/SPP join feature in the Safeguard for Privileged Passwords 2.4+ release is intended for proof of concept and preview purposes only. This feature should not be used in production and is unsupported. The join is fully supported from version 2.7.
-
Resolución
From 2.7 Administrator guide:
Reversing the SPP to SPS joinOnce a Safeguard for Privileged Passwords (SPP) cluster node has been configured to use the Safeguard Sessions Appliance, it can be reversed by a factory reset of the Safeguard Passwords Appliance. The factory reset redeploys the Safeguard Passwords Appliance session module. For more information, see Factory reset from the desktop client on page 281. Another way to reverse the join to Safeguard for Privileged Sessions is to restore a backup that was taken before the first join of Safeguard for Privileged Sessions (SPS).For more information, see Backup and Retention settings on page 299.
To re-enable the internal SPS of the SPP appliance, the factory reset / restore is a required step.To join the SPP to a different set of SPS, first delete the join to the first external SPS then join to the new external SPS.The embedded sessions module in Safeguard for Privileged Passwords version 2.7 will be removed in a future release (to be determ-ined). For uninterrupted service, organizations are advised to join to the more robust Safeguard for Privileged Sessions Appliance for sessions recording and playback.
-
Información adicional
Updated for 2.7