Symantec Privileged Access Management

  • Private Community

  • 1.  How can we monitor the sevices of CA PAM that is install on appliances? Any Health Check process for CA PAM(Privileged Access Manager),

    Posted Dec 11, 2017 03:46 AM

    How can we monitor the sevices of CA PAM that is install on appliances? Any Health Check process for CA PAM(Privileged Access Manager),



  • 2.  Re: How can we monitor the sevices of CA PAM that is install on appliances? Any Health Check process for CA PAM(Privileged Access Manager),
    Best Answer

    Broadcom Employee
    Posted Dec 11, 2017 08:45 AM

    Praveen,

     

    There are two ways to monitor the health of CAPAM.  On all versions, CAPAM can be setup for snmp traps and have alerts received for certain processes and errors.  These are somewhat limited to main functions and certain error conditions but does not include every error condition possible.  For 3.X, you can install the Console Monitor which will literally show you a full status for all your nodes in your cluster(s), but this will take a full CAPAM instance that cannot be used as an Access Node any longer, only for monitoring.

     

    Please see the documentation at:  Search Results - CA Privileged Access Manager - 3.0.2 - CA Technologies Documentation 

     

    Anthony



  • 3.  Re: How can we monitor the sevices of CA PAM that is install on appliances? Any Health Check process for CA PAM(Privileged Access Manager),

    Posted Dec 11, 2017 09:10 AM

    Thanks Manan fir this information.

     

    Is it possible to check the services/process status of PAM with the help of any scripts?



  • 4.  Re: How can we monitor the sevices of CA PAM that is install on appliances? Any Health Check process for CA PAM(Privileged Access Manager),

    Posted Dec 11, 2017 09:17 AM

    In that the CA PAM Appliance is a black box - there is no way to apply any scripts at the command level.  Not sure if Splunk would meet your needs as far as monitoring the log files.



  • 5.  Re: How can we monitor the sevices of CA PAM that is install on appliances? Any Health Check process for CA PAM(Privileged Access Manager),

    Posted Dec 15, 2017 12:27 PM

    In addition to SNMP, you can send messages to a syslog server, which could be a splunk, arcsite, or other SIEM tool.  You may also use the built in splunk forwarder to send these messages to a splunk receiver.