Chat now with support
Chat with Support

One Identity Safeguard for Privileged Sessions 5.10.0 - Administration Guide

Preface Introduction The concepts of SPS The Welcome Wizard and the first login Basic settings User management and access control Managing SPS
Controlling SPS: reboot, shutdown Managing Safeguard for Privileged Sessions clusters Managing a high availability SPS cluster Upgrading SPS Managing the SPS license Accessing the SPS console Sealed mode Out-of-band management of SPS Managing the certificates used on SPS
General connection settings HTTP-specific settings ICA-specific settings RDP-specific settings SSH-specific settings Telnet-specific settings VMware Horizon View connections VNC-specific settings Indexing audit trails Using the Search interface Using the Search (classic) interface Searching session data on a central node in a cluster Advanced authentication and authorization techniques Reports The SPS RPC API The SPS REST API SPS scenarios Troubleshooting SPS Configuring external devices Using SCP with agent-forwarding Security checklist for configuring SPS Jumplists for in-product help Third-party contributions About us

Creating and editing protocol-level HTTP settings

HTTP settings determine the parameters of the connection on the protocol level, including timeout value, and so on.

Caution:

Modifying timeout settings is recommended only to advanced users. Do not modify these settings unless you exactly know what you are doing.

To create a new HTTP settings profile or edit an existing one

  1. Navigate to the Settings tab of the HTTP Control menu item and click to create a HTTP setting profile. Enter a name for the profile (for example http_special).

    Figure 165: HTTP Control > Settings — Creating and editing protocol-level HTTP settings

  2. Click to display the parameters of the profile.

  3. Modify the parameters as needed. The following parameters are available:

    • Idle timeout: Timeout value for the session in seconds. To avoid early timeout, set it to a larger value, for example a week (604800 seconds).

      		 Caution:

      Determining if a connection is idle is based on the network traffic generated by the connection, not the activity of the user. For example, if an application or the taskbar of a graphical desktop displays the time which is updated every minute, it generates network traffic every minute, negating the effects of timeout values greater than one minute and preventing SPS from closing the connection.

    • Session timeout: Timeout value for the session in seconds.

    • Enable pre channel check: Select this option to evaluate the connection and channel policies before establishing the server-side connection. That way if the connection is not permitted at all, SPS does not establish the server-side connection.

      		 NOTE:

      This option cannot be disabled.

  4. To distinguish the audited HTTP requests and responses based on the session cookies of web applications, click Session Cookie Settings > , and enter the name of the session cookie, for example, PHPSESSID, JSESSIONID, or ASP.NET_SessionId. Note that the names of session cookies are case sensitive.

    Repeat this step to add multiple cookie names. Note that if you list multiple cookie names, SPS will use the first one it finds to assign the requests to a session.

  5. Click Commit.

  6. Select this settings profile in the HTTP settings field of your connections.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating