Symantec Privileged Access Management

 View Only
  • 1.  Pause session recordings

    Posted Mar 04, 2020 02:36 PM
    Hello, 

    We would like to have the possibility for an user to pause the session recording when he or she inserts a password in clear text and then resume the session recording. Can this workflow be somehow implemented on PAM? 
    Or are there any controls on PAM for masking the password in the session recordings while user inserts it in the RDP or SSH session? 

    Thank you. 

    Regards,
    Cristina


  • 2.  RE: Pause session recordings

    Broadcom Employee
    Posted Mar 04, 2020 11:19 PM
    Hello Cristina,

    Both RDP and SSH at the native level itself mask the password.

    Can you explain in more detail how is that you are passing plain text password which is visible when typing out?

    Thanks,
    Reatesh.

    ------------------------------
    Principal Support Engineer
    Broadcom
    ------------------------------



  • 3.  RE: Pause session recordings
    Best Answer

    Broadcom Employee
    Posted Mar 05, 2020 02:07 AM

    Hello Cristina,

     

    I assume the operation you mention happens interactively, right?

     

    Anyway, there is no way e.g. in the Session Manager to allow an administrator to pause / resume the recording.

    I suggest to raise an Idea in this forum requesting to introduce such feature in the product.

     

    Best Regards,

    Andreas

     






  • 4.  RE: Pause session recordings

    Posted Mar 05, 2020 10:31 AM

    HI Andreas,

     

    Thank you for your response.

    I'll probably open an Idea, as you suggested.

     

    Regards,

    Cristina

     






  • 5.  RE: Pause session recordings

    Posted Mar 05, 2020 10:34 AM

    Hi Reatesh,

     

    Thanks for your response.

     

    There is a use case when a user logs to a target server (Windows) and from there he opens a file which contains passwords that he want to update, add, delete.

    Would it be possible for PAM to recognize the password fields inside the file and hide them?

     

    Regards,

    Cristina