Layer 7 Privileged Access Management

Expand all | Collapse all

PAM architecture on TS

  • 1.  PAM architecture on TS

    Posted 09-12-2017 08:29 AM

    Team,

    A client is using Terminal Servers to access their customer environments through an RDP connection.

    Each customer is on a private VLan.

    If they want to use PAM to take care of the privileged accounts and have the ability to monitor activity, do they need to enable a PAM appliance for each TS connection (VLAN) or can this be monitored by 1 single PAM appliance ?

    Also in order to monitor further activities on the TS, which additonal components are required ? (PAM Server control)

     

    Regards,

    Frank



  • 2.  Re: PAM architecture on TS

    Posted 01-04-2018 02:55 PM

    I think if I am reading this correctly, you just need 1 appliance and the different VLANs would be different policies. I also would think you would need to setup separate user "Delegated Administrator" groups to separate the users/devices from each client.