Chat now with support
Chat with Support

One Identity Safeguard for Privileged Sessions 5.9.0 - Administration Guide

Preface Introduction The concepts of SPS The Welcome Wizard and the first login Basic settings User management and access control Managing SPS
Controlling SPS: reboot, shutdown Managing Safeguard for Privileged Sessions clusters Managing a high availability SPS cluster Upgrading SPS Managing the SPS license Accessing the SPS console Sealed mode Out-of-band management of SPS Managing the certificates used on SPS
General connection settings HTTP-specific settings ICA-specific settings RDP-specific settings SSH-specific settings Telnet-specific settings VMware Horizon View connections VNC-specific settings Indexing audit trails Using the Search (classic) interface Using the Search interface Searching session data on a central node in a cluster Advanced authentication and authorization techniques Reports The SPS RPC API The SPS REST API SPS scenarios Troubleshooting SPS Configuring external devices Using SCP with agent-forwarding Security checklist for configuring SPS Jumplists for in-product help Third-party contributions About us

Routing uncontrolled traffic between logical interfaces

Purpose:

You can enable routing between logical interfaces, which allows you to direct uncontrolled traffic through SPS.

Steps:
  1. Navigate to Basic Settings > Network > IP forwarding.

    Figure 43: Basic Settings > Network > IP forwarding — IP forwarding between interfaces

  2. To add a new forwarding rule, choose and select the two logical interfaces to connect. You can select the same interface in both fields to use that logical interface in single-interface router mode.

    To delete an existing rule, choose .

  3. Click Commit.

Configuring the routing table

Purpose:

The routing table contains the network destinations SPS can reach. You have to make sure that both the monitored connections, and the local services of SPS (including connections made to the backup and archive servers, the syslog server, and the SMTP server) are routed properly.

You can add multiple IPv4 and IPv6 addresses and address ranges along with their respective gateways.

Steps:
  1. To add a new routing entry, navigate to Basic Settings > Network.

    You can add interface-specific network routes using the Advanced routing option of each interface. Otherwise, use the Routing table option to manage networking routes.

    Figure 44: Basic Settings > Network > Routing table — Routing

  2. Click , then enter the IP address and the network prefix into the Network field.

  3. Enter the IP address of the gateway used on that subnetwork into the Gateway field.

  4. Click Commit.

Configuring date and time

To configure the date and time-related settings of SPS, navigate to Basic Settings > Date & Time.

Figure 45: Basic Settings > Date & Time — Date and time management

Caution:

It is essential to set the date and time correctly on SPS, otherwise the date information of the logs and audit trails will be inaccurate.

SPS displays a warning on this page and sends an alert if the time becomes out of sync.

To explicitly set the date and time on SPS, enter the current date into respective fields of the Date & Time settings group and click Set Date & Time.

When two SPS units are operating in high availability mode, the slave nodes automatically synchronizes its time and date to the master node. To manually synchronize the time between the nodes, click Sync Master (available only in high availability mode).

To retrieve the date automatically from a time server, complete the following steps:

  1. Select your timezone in the Timezone field.

  2. Enter the IP address of an NTP time server into the Address field.

    Use an IPv4 address.

  3. Click Commit.

  4. Click the and icons to add new servers or delete existing ones.

  5. Optional: If the time setting of SPS is very inaccurate (that is, the difference between the system time and the actual time is great), it might take a long time to retrieve the date from the NTP server. In this case, click Sync Now or Sync Master to sync the time immediately using SNTP.

System logging, SNMP and e-mail alerts

E-mail alerts and system logging can be configured on the Basic Settings > Management page.

Related Documents