It is now possible to search in the contents of the audit trails for trails of graphical sessions created and indexed with SPS 6.0.
For more information, see Search in the content of the current audit file.
It is now possible to install the Safeguard Desktop Player application on Mac.
For more information, see Install Safeguard Desktop Player on Mac.
It is now possible to export:
It is now possible to jump to interesting events within an audit trail using configurable, color-coded indicators on the seeker.
You can also choose to display subtitles for audit trails. Subtitles list certain user events as they occurred in a session.
For details, see Replay audit trails.
It is now possible to replay the audit trails of X11 sessions. For more information, see Replay X11 sessions.
It is now possible to follow active connections in semi-real time. For more information, see Replay audit files in follow mode.
You can replay audit trails in your browser, or using the Safeguard Desktop Player application. Note that there are differences between these solutions.
For details on the Safeguard Desktop Player application, see Safeguard Desktop Player User Guide.
Starting with SPS 5 F4, the way audit trails are encrypted has changed to make the encryption process more secure. Audit trails are now encrypted with AES-128-GCM and hashed with the SHA-512 method. This also means that in order to index and replay audit trails, you need to upgrade both your external indexers and your Safeguard Desktop Player. Earlier versions (and Audit Player) will not be able to handle audit trails (with or without encryption) recorded with SPS 5 F4 and later.
Now you can start using the Safeguard Desktop Player application to replay audit trail files that you have downloaded from One Identity Safeguard for Privileged Sessions (SPS). The following information will help you get started using the Safeguard Desktop Player. Note that currently this is not a public release, only a technology preview.