Symantec Privileged Access Management

  • 1.  Windows Proxy System Specification

    Posted Jan 18, 2018 02:48 AM

    Both OS and hardware requirements are documented for windows proxy, Does this specifications change based on the number of target accounts ( local, scheduled tasks, Service account) that the proxy will manage. Practically  how many target accounts can one proxy manage. Is there an limit around this?

     

    And as part of PAM environment do you recommend to have separate windows box for just running this proxy? or can this proxy be installed on the Domain controller or any other windows machine.



  • 2.  Re: Windows Proxy System Specification
    Best Answer

    Broadcom Employee
    Posted Jan 18, 2018 01:41 PM

    To answer the second question first, you don't need a dedicated box for the proxy.   It can be installed on the Domain Controller or on a domain member machine.   We recommend installing more than one windows proxy in the domain so your applications can have an automatic failover in case one proxy becomes unavailable.

     

    The OS and hardware requirements remain the same, no matter how many targets a proxy is managing.  I don't have numbers, but this would depend on the activity, how often the passwords are changed.   I have never seen a limit reached yet.