Symantec Privileged Access Management

 View Only
  • 1.  Cluster setup

    Posted Dec 12, 2019 04:58 AM
    Edited by Inbaselvan R Dec 12, 2019 05:38 AM
    Hi Team,
    We are procuring 4 PAM appliance and 1 management console.We have two DC namely DC1 and DC2.Both these DC's have servers and network devices which needs to be managed.We are thinking of placing two appliance in each DC in which one will act as primarysite and another as secondary site.Same goes for the other DC.Is this set up good or do you have any other suggestions? Also will there be any loadbalancer required for this setup(VIP).Thanks in advance.


  • 2.  RE: Cluster setup
    Best Answer

    Broadcom Employee
    Posted Dec 12, 2019 09:26 AM
    Hi, for multi-site clusters an external load balancer will serve you better. This allows you better control of which users are directed to which cluster members. Also, at least for the latest PAM release 3.3 you want to have three nodes in the primary site. With two nodes there is no Quorum if one is lost. See the explanation of Quorum on page https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-privileged-access-management/privileged-access-manager/3-3-1/deploying/set-up-a-cluster.html, and more detailed discussions about it on page https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-privileged-access-management/privileged-access-manager/3-3-1/deploying/set-up-a-cluster/cluster-synchronization-promotion-and-recovery.html for details.