The Basic Settings > Network tab contains the network interface and naming settings of One Identity Safeguard for Privileged Sessions (SPS).
Preface
Introduction
The concepts of One Identity Safeguard for Privileged Sessions (SPS)
The philosophy of One Identity Safeguard for Privileged Sessions (SPS)
Policies
Credential Stores
Plugin framework
Indexing
Supported protocols and client applications
Cloud deployment considerations
The Welcome Wizard and the first login
HTTP
ICA
MSSQL
Remote Desktop Gateway Server Protocol (RDGSP)
Remote Desktop Protocol (RDP)
Secure Shell Protocol (SSH)
Telnet
VMware Horizon View
Virtual Network Computing (VNC)
Modes of operation
Transparent mode
Single-interface transparent mode
Non-transparent mode
Inband destination selection
Connecting to a server through One Identity Safeguard for Privileged Sessions (SPS)
Connecting to a server through One Identity Safeguard for Privileged Sessions (SPS) using SSH
Connecting to a server through One Identity Safeguard for Privileged Sessions (SPS) using RDP
Connecting to a server through One Identity Safeguard for Privileged Sessions (SPS) using an RD Gateway
Archive and backup concepts
Configuration export
System backup
Connection backup
Connection archive
Support bundle
Debug logs
Connection logs
Core dump files
Maximizing the scope of auditing
IPv6 in One Identity Safeguard for Privileged Sessions (SPS)
SSH host keys
Authenticating clients using public-key authentication in SSH
The gateway authentication process
Four-eyes authorization
Network interfaces
High Availability support in One Identity Safeguard for Privileged Sessions (SPS)
Versions and releases of One Identity Safeguard for Privileged Sessions (SPS)
Accessing and configuring One Identity Safeguard for Privileged Sessions (SPS)
The initial connection to One Identity Safeguard for Privileged Sessions (SPS)
Basic settings
Creating an alias IP address (Microsoft Windows)
Creating an alias IP address (Linux)
Modifying the IP address of One Identity Safeguard for Privileged Sessions (SPS)
Configuring One Identity Safeguard for Privileged Sessions (SPS) with the Welcome Wizard
Logging in to One Identity Safeguard for Privileged Sessions (SPS) and configuring the first connection
Supported web browsers
The structure of the web interface
User management and access control
Elements of the main workspace
Multiple users and locking
Preferences
Change password
Audit keystore
Network settings
Routing table
IP forwarding
Naming
HTTPS proxy
Configuring user and administrator login addresses
Managing logical interfaces
Routing uncontrolled traffic between logical interfaces
Configuring the routing table
Configuring date and time
System logging, SNMP and e-mail alerts
Configuring system logging
Configuring e-mail alerts
Configuring SNMP alerts
Querying SPS status information using agents
Customize system logging in One Identity Safeguard for Privileged Sessions (SPS)
Configuring system monitoring on SPS
Configuring monitoring
Health monitoring
Preventing disk space fill-up
System related traps
Traffic related traps
Data and configuration backups
Creating a backup policy using Rsync over SSH
Creating a backup policy using SMB/CIFS
Creating a backup policy using NFS
Creating configuration backups
Creating data backups
Encrypting configuration backups with GPG
Archiving
Creating an archive policy using SMB/CIFS
Creating an archive policy using NFS
Archiving the collected data
Cleaning up audit data
Using plugins
Forwarding data to third-party systems
Starling integration
Login settings
Managing One Identity Safeguard for Privileged Sessions (SPS) users locally
Managing One Identity Safeguard for Privileged Sessions (SPS)
Creating local users in One Identity Safeguard for Privileged Sessions (SPS)
Deleting local users from One Identity Safeguard for Privileged Sessions (SPS)
Setting password policies for local users
Managing local user groups
Managing One Identity Safeguard for Privileged Sessions (SPS) users from an LDAP database
Authenticating users to a RADIUS server
Authenticating users with X.509 certificates
Authenticating users with SAML2
Managing user rights and usergroups
Assigning privileges to user groups for the One Identity Safeguard for Privileged Sessions (SPS) web interface
Modifying group privileges
Finding specific usergroups
Using usergroups
Built-in usergroups of One Identity Safeguard for Privileged Sessions (SPS)
Creating rules for restricting access to search audit data
Displaying the privileges of users and user groups
Listing and searching configuration changes
Controlling One Identity Safeguard for Privileged Sessions (SPS): reboot, shutdown
Managing One Identity Safeguard for Privileged Sessions (SPS) clusters
General connection settings
Cluster roles
Enabling cluster management
Creating a cluster
Joining to a cluster
Assigning roles to nodes in your cluster
Configuration synchronization across nodes in a cluster
Monitoring the status of nodes in your cluster
Updating the IP address of a node in a cluster
Managing a cluster with configuration synchronization without central search
Managing a cluster with central search configuration and configuration synchronization
Managing a High Availability One Identity Safeguard for Privileged Sessions (SPS) cluster
HA cluster configuration and management options
Adjusting the synchronization speed
Redundant heartbeat interfaces
Next-hop router monitoring
Upgrading One Identity Safeguard for Privileged Sessions (SPS)
Upgrade checklist
Upgrading One Identity Safeguard for Privileged Sessions (SPS) (single node)
Upgrading a High Availability One Identity Safeguard for Privileged Sessions (SPS) cluster
Troubleshooting
Exporting the configuration of One Identity Safeguard for Privileged Sessions (SPS)
Importing the configuration of One Identity Safeguard for Privileged Sessions (SPS)
Managing the One Identity Safeguard for Privileged Sessions (SPS) license
Accessing the One Identity Safeguard for Privileged Sessions (SPS) console
Using the console menu of One Identity Safeguard for Privileged Sessions (SPS)
Enabling SSH access to the One Identity Safeguard for Privileged Sessions (SPS) host
Changing the root password of One Identity Safeguard for Privileged Sessions (SPS)
Firmware update using SSH
Exporting and importing the configuration of One Identity Safeguard for Privileged Sessions (SPS) using the console
Data migration from an SPS instance to another SPS instance
Sealed mode
Out-of-band management of One Identity Safeguard for Privileged Sessions (SPS)
Managing the certificates used on One Identity Safeguard for Privileged Sessions (SPS)
Generating certificates for One Identity Safeguard for Privileged Sessions (SPS)
Uploading external certificates to One Identity Safeguard for Privileged Sessions (SPS)
Generating TSA certificate with Windows Certificate Authority on Windows Server 2008
Generating TSA certificate with Windows Certificate Authority on Windows Server 2012
Configuring connections
Modifying the destination address
Configuring inband destination selection
Modifying the source address
Creating and editing channel policies
Real-time content monitoring with Content Policies
Configuring time policies
Creating and editing user lists
Authenticating users to an LDAP server
Audit policies
HTTP-specific settings
Encrypting audit trails
Timestamping audit trails with built-in timestamping service
Timestamping audit trails with external timestamping service
Digitally signing audit trails
Verifying certificates with Certificate Authorities
Verifying certificates with Certificate Authorities using trust stores
Signing certificates on-the-fly
Creating a Local User Database
Sharing SPS functions with SPP
Supported HTTP channel types
Limitations in handling HTTP connections
Authentication in HTTP and HTTPS
Creating a new HTTP authentication policy
Setting up HTTP connections
ICA-specific settings
Setting up a transparent HTTP connection
Enabling One Identity Safeguard for Privileged Sessions (SPS) to act as an HTTP proxy
Enabling TLS encryption in HTTP
Configuring half-sided SSL encryption in HTTP
Session-handling in HTTP
Creating and editing protocol-level HTTP settings
Customizing HTTP error templates
Setting up ICA connections
Supported ICA channel types
Creating and editing protocol-level ICA settings
One Identity Safeguard for Privileged Sessions (SPS) deployment scenarios in a Citrix environment
Troubleshooting Citrix-related problems
MSSQL-specific settings
Setting up MSSQL connections
Supported MSSQL channel types
Authentication in MSSQL
Creating and editing protocol-level MSSQL settings
Enabling TLS-encryption for MSSQL connections
RDP-specific settings
Supported RDP channel types
Creating and editing protocol-level RDP settings
Network Level Authentication (NLA) with One Identity Safeguard for Privileged Sessions (SPS)
SSH-specific settings
Network Level Authentication (NLA) with domain membership
Using One Identity Safeguard for Privileged Sessions (SPS) across multiple domains
Verifying the certificate of the RDP server in encrypted connections
Enabling TLS-encryption for RDP connections
Using One Identity Safeguard for Privileged Sessions (SPS) as a Remote Desktop Gateway
Configuring Remote Desktop clients for gateway authentication
Inband destination selection in RDP connections
Usernames in RDP connections
Saving login credentials for RDP on Windows
Configuring RemoteApps
Configuring the RemoteApp Launcher
Configuring SPS to enable exporting files from audit trails after RDP file transfer through clipboard or disk redirection
Configuring SPS to enable exporting sound from audit trails
Sharing RDP connection policies with SPP
Sharing RDP connection policies with SPS
Using credential injection in SPP-initiated RDP sessions
Setting the SSH host keys of the connection
Using Sudo with SPS
Telnet-specific settings
Setting the SSH host keys accepted on the server side
Setting the SSH host keys offered to the clients
Supported SSH channel types
Sharing SSH connection policies with SPP
Sharing SSH connection policies with SPS
Authentication Policies
Creating a new authentication policy
Client-side authentication settings
Relayed authentication methods
Configuring your Kerberos environment
Kerberos authentication settings
Server host keys
Automatically adding the host keys of a server to One Identity Safeguard for Privileged Sessions (SPS)
Manually adding the host key of a server
Creating and editing protocol-level SSH settings
Supported encryption algorithms
Enabling TLS-encryption for Telnet connections
Creating a new Telnet authentication policy
Extracting username from Telnet connections
Creating and editing protocol-level Telnet settings
Inband destination selection in Telnet connections
VMware Horizon View connections
VNC-specific settings
Indexing audit trails
Reindex lucene indeces
Configuring the internal indexer
Configuring external indexers
Using the Search interface
Prerequisites and limitations
Hardware requirements for the external indexer host
Configuring One Identity Safeguard for Privileged Sessions (SPS) to use external indexers
Installing the external indexer
Configuring the external indexer
Configuring a service pool
Uploading decryption keys to the external indexer
Configuring a hardware security module (HSM) or smart card to integrate with external indexer
Monitoring the status of the indexer services
HTTP indexer configuration format
Setting up and testing the environment
Encrypting a PKCS#11 PIN
Starting and restarting the external-indexer service when using a custom password for PKCS#11 PIN encryption
Configuring SoftHSM
Configuring AWS CloudHSM
Configuring a smart card
Customizing the indexing of HTTP traffic
Starting the external indexer
Disabling indexing on One Identity Safeguard for Privileged Sessions (SPS)
Managing the indexers
Upgrading the external indexer
Troubleshooting external indexers
Card view
Table view
Flow view
Search Permissions
Specifying time ranges
Using search queries
Searching in the contents of audit trails
Audit trail downloads information on the Search interface
Displaying statistics on search results
Analyzing data using One Identity Safeguard for Privileged Analytics
The search and filter process
Viewing session details
Advanced authentication and authorization techniques
Viewing session details for data recorded by SPS
Viewing session details for data recorded by SPP
Visualizing Frequent Item Sets on the FIS flow view
Replaying audit trails in your browser
Using the browser to play video files
Streamable session recording playback with Safeguard Desktop Player started from the SPS UI
Viewing encrypted screenshots
Replaying encrypted audit trails in your browser
Following active sessions
Creating report subchapters
Creating search-based report subchapters from search results
Creating search-based report subchapters from scratch
Search interface changes between version 5.0 and 6.0
Searching session data on a central node in a cluster
Configuring usermapping policies
Configuring gateway authentication
Reports
Configuring out-of-band gateway authentication
Performing out-of-band gateway authentication on One Identity Safeguard for Privileged Sessions (SPS)
Performing inband gateway authentication in SSH and Telnet connections
Performing inband gateway authentication in RDP connections
Troubleshooting gateway authentication
Configuring four-eyes authorization
Configuring four-eyes authorization
Performing four-eyes authorization on One Identity Safeguard for Privileged Sessions (SPS)
Using credential stores for server-side authentication
Configuring local Credential Stores
Performing gateway authentication to RDP servers using local Credential Store and NLA
Configuring password-protected Credential Stores
Unlocking Credential Stores
Using a custom Credential Store plugin to authenticate on the target hosts
Integrating external authentication and authorization systems
How Authentication and Authorization plugins work
Using a custom Authentication and Authorization plugin to authenticate on the target hosts
Performing authentication with AA plugin in terminal connections
Performing authentication with AA plugin in Remote Desktop connections
Integrating ticketing systems
Creating a custom plugin
Plugin troubleshooting
Contents of the operational reports
Configuring custom reports
Creating report subchapters
The One Identity Safeguard for Privileged Sessions (SPS) REST API
One Identity Safeguard for Privileged Sessions (SPS) scenarios
Creating reports from audit trail content
Creating search-based report subchapters from search results
Creating search-based report subchapters from scratch
Creating PCI DSS reports
Contents of PCI DSS reports
Report output
Import and visualize audit data from SPS in the Power BI Desktop reporting application
Configuring public-key authentication on One Identity Safeguard for Privileged Sessions (SPS)
Troubleshooting One Identity Safeguard for Privileged Sessions (SPS)
Configuring public-key authentication using local keys
Configuring public-key authentication using an LDAP server and a fixed key
Configuring public-key authentication using an LDAP server and generated keys
Organizing connections in non-transparent mode
Using inband destination selection in SSH connections
Using inband destination selection with PuTTY
Using inband destination selection with OpenSSH
Using inband selection and nonstandard ports with PuTTY
Using inband selection and nonstandard ports with OpenSSH
Using inband destination selection and gateway authentication with PuTTY
Using inband destination selection and gateway authentication with OpenSSH
SSH usermapping and keymapping in AD with public key
Network troubleshooting
Gathering data about system problems
Viewing logs on One Identity Safeguard for Privileged Sessions (SPS)
Changing log verbosity level of One Identity Safeguard for Privileged Sessions (SPS)
Collecting logs and system information for error reporting
Collecting logs and system information of the boot process for error reporting
Support hotfixes
Status history and statistics
Using SPS with SPP
Connection statistics
Memory
Disk
CPU
Network connections
Interface
Load average
Number of processes
Displaying custom connection statistics
Troubleshooting a One Identity Safeguard for Privileged Sessions (SPS) cluster
Understanding One Identity Safeguard for Privileged Sessions (SPS) cluster statuses
Recovering One Identity Safeguard for Privileged Sessions (SPS) if both nodes broke down
Recovering from a split brain situation
Replacing a HA node in a One Identity Safeguard for Privileged Sessions (SPS) cluster
Resolving an IP conflict between cluster nodes
Understanding One Identity Safeguard for Privileged Sessions (SPS) RAID status
Restoring One Identity Safeguard for Privileged Sessions (SPS) configuration and data
Restoring One Identity Safeguard for Privileged Sessions (SPS) configuration
Restoring One Identity Safeguard for Privileged Sessions (SPS) configuration and data to a new SPS appliance
Restoring One Identity Safeguard for Privileged Sessions (SPS) configuration and data to the same SPS appliance
VNC is not working with TLS
Configuring the IPMI from the BIOS after losing IPMI password
Incomplete TSA response received
Using UPN usernames in audited SSH connections
Configuring the Passwords-initiated workflow
Configuring the Sessions-initiated workflow
Configuring external devices
Configuring SPP for Sessions-initiated workflow
Configuring SPS for Sessions-initiated workflow
Configuring SPS for SRA-initiated workflow
Linking SPS to SPP
Switching seamlessly between SPS and SPP
Troubleshooting the SPS to SPP link
Configuring advanced routing on Linux
Configuring advanced routing on Cisco routers
Configuring advanced routing on Sophos UTM (formerly Astaro Security Gateway) firewalls
Using SCP with agent-forwarding
Security checklist for configuring One Identity Safeguard for Privileged Sessions (SPS)
Jumplists for in-product help
Basic Settings > Management
Basic Settings > Local Services
Basic Settings > System
<Protocol name> Control > Global Options
Configuring SPS to use an LDAP backend
Glossary
Network settings
Routing table
Figure 49: Basic Settings > Network > Routing table
When sending a packet to a remote network, SPS consults the routing table to determine the path it should be sent. If there is no information in the routing table then the packet is sent to the default gateway. Use the routing table to define static routes to specific hosts or networks. You have to use the routing table if SPS interfaces are connected to multiple subnets.
Click the 
For more information, see Configuring the routing table.
IP forwarding
Figure 50: Basic Settings > Network > IP forwarding
You can enable routing between logical interfaces, which allows you to direct uncontrolled traffic through SPS. For more information, see Routing uncontrolled traffic between logical interfaces.
To mimic the functionality of the deprecated Router mode, configure a logical interface for each physical interface you want to connect, and enable IP forwarding between them.
Naming
Figure 51: Basic Settings > Network > Naming
-
Hostname: Name of the machine running SPS.
-
Nick name: The nickname of SPS. Use it to distinguish the devices. It is displayed in the core and boot login shells.
-
DNS search domain: Name of the domain used on the network. When resolving the domain names of the audited connections, SPS will use this domain to resolve the target hostname if the appended domain entry of a target address is empty.
-
Primary DNS server: IP address of the name server used for domain name resolution.
-
Secondary DNS server: IP address of the name server used for domain name resolution if the primary server is unaccessible.