OpenText NetIQ Privileged Access Manager Community

MFA support with DB access on PAM

SANJIB

Hello PAM Team, AFAIK, we don't have 2FA for DB session from PAM. This customer is using PAM Proxy method to connect db. This is becoming a trend in most of the public/govt sector compliance, the connection to DB must have 2Factor authentication.…

1 month ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

PAM Resource Owner Role

Anderson Lee

Most of resources (Windows.Linux.Applicaitons..etc) are belong to some of owners. They shoud have right to approval the owned resources request by individully. For example The FAB resources should owned by FAB leader or FAB manager ,the ERP resources…

1 month ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

To set the Cookies to be Http-Only and turn the Security Flag on

Sachina Singh

In the vulnerability assessment of the NetIq PAM server 4.4 we have been advised to set the PAM cookies to HTTP-Only and enable secure flag on each cookie. Could you please provide the details on how we can make this change to enable Http-Only and Secure…

4 months ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Date based restriction on IDAM

Avi Mathur

Accounts can be restricted to only permit logins during configurable times and days. Access can be denied based on defined holidays & holiday range.

6 months ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Limitation of concurrent session in PAM

Avi Mathur

PAM Users can be limited to the number of concurrent terminal logins during SSH-Relay & PAM-console (using browser).

7 months ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

UNIX/Linux Agent functionality will be aligned with Windows one

IvanL

That's actually about a difference in behaviour of both Agents in PAM: now for Windows Agent we have the same WebRDP as for Windows Agentless so you can go and create an Assignment with WebRDP Permission for the machine when you have Windows Agent installed…

7 months ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Manage PAM user status independently from authentication source

Jakantana

Use-case is the following: - PAM is configured to authenticate users from an external source (AD with/without NaaF...) - User is active in the external authentication source - PAM is configured with User Roles etc..., leveraging or not group memberships…

11 months ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

PAM solution should be able to perform auto discovery of privileged accounts on target systems and able to perform two way reconciliation.

Shivam Mishra

Hello Team, We have use case to discover privileged account from all integrated supported endpoint's (windows, Linux ,Database ,network devices). Currently we have "privileged account sniffer tool 3.5 " which doesn’t discover privileged account from…

11 months ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Network control for PAM Agent base on Windows and Linux platform

ANDERSON LEE

Hi We try to find out the solution to replace exist customers Privileged Account products. But it's really tough and painstaking in POC for OpenText/Micro Focus PAM. Most of others PAM solutions will emphasize the Access Control for Applications…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

PAM ACL: MSSQL Database Command Blocking

Raj Kumar Jain

Hello there, In PAM proxy for MSSQL database access is now required to block specific db-commands like 'drop', 'alter' or may be another specific one. The current ACL is not supported for the same. Please treat this as a request for enhancement for…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

PAM: Command Control Over Windows Server

Raj Kumar Jain

Hello there, In PAM, for controlling command; we have two methods for Windows server - one, EAC and other is Command Control. In Command Control, the configuration is command risk based and in windows the commands are executed first and then the user…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

NetIQ PAM 4.3 support HSM ?

rafaelrodrigues

In many regulatory scenarios such as PCI, HIPPA, among others, certificate structures are stored in HSM. And looking at the competitors they all support HSM technology. As a result, we stopped competing on several occasions because we do not have this…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Improve Syslog Forwarding events

StephCT

Hi, syslog server integration must be really improved. There are 4 main points to be enhanced in PAM: 1. The idea is to implement in PAM the possibility to send CEF events via Syslog and not using JSON format. CEF would be great in order to integrate…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Implement a WEB proxy in similar manner to RDP proxy

mcurrie

Implement a WEB proxy in similar manner to the RDP proxy .I would suggest implementing a WEB proxy feature similar to the RDP so access controls can be applied to Privileged Web enviroments as well as SSH and RDP. This would be used to limit and hide…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Migrate the run user=submit user option in command and control to the new access control framework.

mcurrie

Migrate the run user=submit user option in command and control to the new access control framework. With the continued deprecation of functions in the old PAM admin interface, one function which should have been migrated, which still has not been, is…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Add Sync button into Server and Agent interface

IvanL

At the moment synchronization between Server and Agent manages by Server itself and often it's not 100% clear if all things are in sync between Agent and Server (for instance: when you add another Policy like EAC but it doesn't work after that, then after…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Command Risk: prevent command execution

IvanL

At the moment Command Risk is able to detect risky command and disconnect and block user who issued risky command. At the same time even if it recognize command as risky, it'll allow it's execution. Please add this functionality into PAM, I suppose…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Proxy SSH connections with Active-Directory account like for RDP connections

kaffee

With PAM you can proxy RDP sessions with an preconfigured Active-Directory account (run User). Some configuration is not working for SSH or SQL Developer connections. Use Case: External customers have their Accounts in a dedicated "isolated" domain…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

PAM Emergency Access on WebRDP cannot work by resource name

Elena Zhang

Connecting to WebRDP through the emergency access mode of Access Control, only can work by putting IP address to request, cannot work by putting recource name. Same thing worked on normal web RDP connection. For configuration, we suggest both resource…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

PAM RDP Connection to Windows System notify the user

ITC KDC

While taking window remote session through PAM RDP Relay method if one user have taken an PAM RDP access for a windows server using a Shared Account (lets say "Administrator") and his session his active, at same point of time if other team member tries…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Make the PAM system to use actual timezone instead of UTC

Muhammad syafwan Gustaf

Current PAM system using UTC as their timezone making it hard for user who are on a different timezone. For example, configuring Time Restriction feature in a Assignment , user need to convert their time into UTC timezone to be able to use the time…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

PAM WebRDP resolution setting for each session

ANDERSON LEE

User can change the RDP resolution to suit for their access device or monitor 's size and resoluiotn in traditional RDP. Sometimes we need setting the fix resolution ,sometime need depned on end-user But we can't find any resolution setting from WebRDP…

over 1 year ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

PAM Web RDP/Web SSH block or disconnect by specific keystroke

Anderson Lee

Agentless become a more pupular for customers recently. But lack of access control for block and disconnect function for agentless. If any sampe script can add into the assignment to fulfill this function will be really useful

over 2 years ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Disable or Restrict multiple concurrent logins in PAM Tool

Niraj Sinha

Hi All, The PAM Version: 4.2.0 don't having feature of how to restrict multiple concurrent logins simultaneously from different source. Multiple concurrent logins in PAM Version: 4.2.0 should be integrated as an enhanced feature. Thanks, Niraj…

over 2 years ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Linux SSH Relay - possibility to SSH Private Key rotation

matjazp

Hi, My customer has concern if I as PAM administrator must get/see/put in all the SSH private keys for purpose of private key authentication. I was thinking that I can also prepare PAM reconciliation procedure in the similar way like change password…

over 2 years ago
OpenText NetIQ Privileged Access Manager
PAM Ideas

Menu

OpenText NetIQ Privileged Access Manager

MFA support with DB access on PAM

PAM Resource Owner Role

To set the Cookies to be Http-Only and turn the Security Flag on

Date based restriction on IDAM

Limitation of concurrent session in PAM

UNIX/Linux Agent functionality will be aligned with Windows one

Manage PAM user status independently from authentication source

PAM solution should be able to perform auto discovery of privileged accounts on target systems and able to perform two way reconciliation.

Network control for PAM Agent base on Windows and Linux platform

PAM ACL: MSSQL Database Command Blocking

PAM: Command Control Over Windows Server

NetIQ PAM 4.3 support HSM ?

Improve Syslog Forwarding events

Implement a WEB proxy in similar manner to RDP proxy

Migrate the run user=submit user option in command and control to the new access control framework.

Add Sync button into Server and Agent interface

Command Risk: prevent command execution

Proxy SSH connections with Active-Directory account like for RDP connections

PAM Emergency Access on WebRDP cannot work by resource name

PAM RDP Connection to Windows System notify the user

Make the PAM system to use actual timezone instead of UTC

PAM WebRDP resolution setting for each session

PAM Web RDP/Web SSH block or disconnect by specific keystroke

Disable or Restrict multiple concurrent logins in PAM Tool

Linux SSH Relay - possibility to SSH Private Key rotation

Resources

Menu

Popular Tags

Resources