Symantec Privileged Access Management

  • 1.  Possible to share a production proxy with a lab CAPAM test node?

    Posted Nov 08, 2018 01:50 PM

    Is it possible to share a proxy with another CAPAM node not in a cluster on the same network?  We have a test CAPAM node on the same network as our production CAPAM cluster. I want to pull some test hosts into our test CAPAM node to manage passwords and I want to use the production proxy. The test hosts will be managed solely by the test CAPAM node.

     

    CAPAM ver 2.8.4.1

     

    Thank you.



  • 2.  Re: Possible to share a production proxy with a lab CAPAM test node?
    Best Answer

    Broadcom Employee
    Posted Nov 08, 2018 02:38 PM

    Hi Jeff,

    It would be better to install a new proxy for the test system.  The proxy in production is registered with production PAM Server.

    If you have a proxy already installed on the network which is not being used by the production PAM server, you can modify the proxy config file and point to the test PAM Server, and restart the proxy daemon service to re-register that proxy with the test PAM Server.

    C:\<install_home>\cloakware\cspmclient\config\cspm_client_config.xml
    Regards,
    Margaret


  • 3.  Re: Possible to share a production proxy with a lab CAPAM test node?

    Posted Nov 08, 2018 02:44 PM

    Thank you Margaret. It sounds like I need to stand up a separate proxy for the test node.

     

    -Jeff