One Identity Safeguard for Privileged Sessions 6.0.1 - Administration Guide

Networking considerations

• One Identity Safeguard for Privileged Sessions (SPS) stores sensitive data. Use a firewall and other appropriate controls to ensure that unauthorized connections cannot access it.

• If possible, enable management access to SPS only from trusted networks.

• Make sure that the HA interface of SPS is connected to a trusted network.

Jumplists for in-product help

To find the documentation for a specific UI element, browse the following sections.

Basic Settings > Management

• Basic Settings > Management > Syslog: For details, see Configuring system logging.

• Basic Settings > Management > SNMP trap settings: For details, see Configuring SNMP alerts.

• Basic Settings > Management > Mail settings: For details, see Configuring e-mail alerts.

• Basic Settings > Management > Web interface timeout: For details, see Web interface timeout.

• Basic Settings > Management > RPC API settings: For details, see Enabling RPC API access to One Identity Safeguard for Privileged Sessions (SPS).

• Basic Settings > Management > Change root password: For details, see Changing the root password of One Identity Safeguard for Privileged Sessions (SPS).

• Basic Settings > Management > System backup: For details, see:

  • Creating configuration backups

  • Encrypting configuration backups with GPG

• Basic Settings > Management > Verbose system logs: For details, see Changing log verbosity level of One Identity Safeguard for Privileged Sessions (SPS).

• Basic Settings > Management > SSL certificates: For details, see Managing the certificates used on One Identity Safeguard for Privileged Sessions (SPS).

• Basic Settings > Management > Core files: For details, see Gathering data about system problems.

• Basic Settings > Management > Disk space fill-up prevention: For details, see Preventing disk space fill-up.

• Basic Settings > Management > Web gateway authentication: For details, see Configuring out-of-band gateway authentication.

• Basic Settings > Management > Splunk forwarder: For details, see Using the Splunk forwarder.

Basic Settings > Local Services

• Basic Settings > Local Services > SSH server: For details, see Enabling SSH access to the One Identity Safeguard for Privileged Sessions (SPS) host.

• Basic Settings > Local Services > Web login (admin and user): For details, see Configuring user and administrator login addresses.

• Basic Settings > Local Services > Web login (user only): For details, see Configuring user and administrator login addresses.

• Basic Settings > Local Services > SNMP server settings: For details, see Querying SPS status information using agents.

• Basic Settings > Local Services > Indexer service: For details, see Configuring the internal indexer.

• Basic Settings > Local Services > Privileged Account Analytics: Select this option only if you are also using One Identity Safeguard for Privileged Analytics.

  To enable One Identity Safeguard for Privileged Analytics and analyze the behavior of your users, One Identity Safeguard for Privileged Sessions (SPS) requires a special license. Also, depending on the number of your users and sessions, the performance and sizing of SPS must be considered. If you are interested in One Identity Safeguard for Privileged Analytics, contact our Sales Team, or your One Identity representative. For details on One Identity Safeguard for Privileged Analytics, see the One Identity One Identity Safeguard for Privileged Analytics website. For details on enabling One Identity Safeguard for Privileged Analytics, see Safeguard for Privileged Analytics Configuration Guide.

• Basic Settings > Local Services > Cluster Interface: This option is related to an experimental feature that will allow you to manage and synchronize the configuration of multiple SPS appliances from a central server. If you are interested in this feature, contact our Support Team.