Symantec Privileged Access Management

 View Only

 about "CA PAM received suspicious incoming connection popups from PAM client"

MARUBUN SUPPORT's profile image
MARUBUN SUPPORT posted May 02, 2025 04:20 AM

Hi Team,

I have a question about KB.

CA PAM received suspicious incoming connection popups from PAM client

Broadcom remove preview
CA PAM received suspicious incoming connection popups from PAM client
Why does one receive alerts stating that CA PAM has received suspicious incoming connections?
View this on Broadcom >

The Issue/Introduction dialog says "Click 'No' to block the connection," but the Resolution says "but we suggest to press Yes....".
I think blocking is more secure, so should I click "Yes" as suggested in the Resolution?

Clicking either Yes or No to block the  incoming connection will not affect your session, but we suggest to press Yes to prevent any other users from tampering with your CA PAM client session and possibly hijacking a session/connection using the same service you are binding to, unless you are confident that the connection is the result of a workflow you started or is legitimate.

Thanks,

Ralf Prigl's profile image
Broadcom Employee Ralf Prigl

Hello, You are correct. By coincidence, this KB article was updated yesterday and the new version is published now. You will find a lot of other changes, but they include fixing the mistake you found.