Idea ID: 2873580

Session start notification

Ivane

Status: New Idea

over 2 years ago

It would be good to get notifications when User starts a session through PAM: RDP, SSH etc., for all kind of sessions (Web, Terminal, Direct etc.).
That would be also good if there will be a mechanism of session approval (like a Workflow) when Security Officer will approve new session - for all or some sessions.
Both ideas are popular for Security Officers, they want to keep full control over Privileged Assets and Credentials and any activities related with they.

Tags:

User Interface & Reporting

PAM

configuration

notification

Anderson Lee over 1 year ago

Get the proactive notification during the resource be accessed is essential function for PAM system actually in no doubt.
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel
Anderson Lee over 1 year ago in reply to Norbert Klasen

Hi Klasen

You are right ,the syslog it kind of log what we can get.

But it still not enought fulfill the audit purpose.

At least it should be baisc function for other PAM solution.

Thanks

Anderson,
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel
Norbert Klasen over 2 years ago

PAM does send out Session Create events via Syslog.

Example from NetIQ Sentinel
- Cancel
- Vote Up 0 Vote Down
- More
- Cancel

Menu

PAM Ideas

Labels

Session start notification

Tags:

Resources