UI and Workflows

The name of the additional account usage.

Acceptable value: String

The logical name of a link to an extra account.

Acceptable value: String

Whether or not users will be required to supply ticketing information in order to retrieve an account.

Acceptable value: Yes/No

Default Value: No

Whether or not a users will be required to specify a ticket number that will be validated in order to retrieve an account.

Acceptable value: Yes/No

Default Value: No

Whether or not dual control will be disabled for incident tickets.

Acceptable value: Yes/No

Default Value: No

Whether or not dual control will be disabled for change tickets.

Acceptable value: Yes/No

Default Value: No

The unique ID of a PSM  server. This ID is taken from the list of PSM servers configured in Options.

Acceptable value: String

Default Value: PSM server

Whether or not the platform will be used to define address ranges.

Acceptable value: Yes/No

Default Value: No

Acceptable value: Safe name

Default Value: PSMRecordings

When (in days) the recordings stored in a safe are deleted. Any change in the value is applied only to new recording safes. Existing safes continue with the value originally assigned to them.

Acceptable value: Number

Default Value: 180 days

The maximum duration in minutes of the session.

Acceptable value: Number

Default Value: -1

Whether or not a notification will be displayed when PSM starts recording a remote session.

Acceptable value: Yes/No

Default Value: Yes

The number of seconds that the recorded session notification is displayed.
If 0 (zero) is specified, the notification will not be closed automatically and will be displayed until the user closes it.

Acceptable value: Number

Default Value: 5

Whether or not to display an alert during a privileged session indicating that this session is being monitored live.

Acceptable value: Yes/No

Default Value: Yes

Time in seconds to display the alert during live sessions indicating that this session is being monitored. Specify '0' (zero) to display it indefinitely.

Acceptable value: Number

Default Value: 5

Whether or not dual control is disabled for PSM connections.

Acceptable value: Yes/No

Default Value: No

Whether or not to enable Privileged SSO for this platform.

Acceptable value: Yes/No

Default Value: No

Whether or not to use personal password. This parameter should only be enabled when the EnablePrivilegedSSO parameter is disabled.

Acceptable value: Yes/No

Default Value: No

Whether or not to enable SSH tunneling.

Acceptable value: Yes/No

Default Value: No

Whether or not the STDIN of the SSH will be recorded in the text recording.

Acceptable value: Yes/No

Default Value: Yes

Whether or not the STDOUT of the SSH will be recorded in the text recording.

Acceptable value: Yes/No

Default Value: Yes

Whether or not audit records will be created for the privileged session.

Acceptable value: Yes/No

Default Value: Yes

The time allowed for the audit server component to terminate gracefully, in milliseconds. Zero (0) indicates that there is no timeout.

Acceptable value: Number

Default Value: 1000

The time allowed for communication with the audit server component to be acknowledged, in milliseconds. Zero (0) indicates that there is no timeout.

Acceptable value: Number

Default Value: 500

The number of times that PSM will try to send audit record to the Vault. This number must be positive.

Acceptable value: Number

Default Value: 3

The time allowed for the connection component to terminate gracefully, in milliseconds. Zero (0) indicates that there is no timeout.

Acceptable value: Number

Default Value: 4000

The additional time allowed for audits to be acknowledged by the Vault, in milliseconds.

Acceptable value: Number

Default Value: 5000

Whether or not audit records will be created for the privileged session.

Acceptable value: Yes/No

Default Value: Yes

The time allowed for the audit server component to terminate gracefully, in milliseconds. Zero (0) indicates that there is no timeout.

Acceptable value: Number

Default Value: 1000

The time allowed for communication with the audit server component to be acknowledged, in milliseconds. Zero (0) indicates that there is no timeout.

Acceptable value: Number

Default Value: 500

The number of times that PSM will try to send audit record to the Vault. This number must be positive.

Acceptable value: Number

Default Value: 3

The time allowed for the connection component to terminate gracefully, in milliseconds. Zero (0) indicates that there is no timeout.

Acceptable value: Number

Default Value: 4000

The additional time allowed for audits to be acknowledged by the Vault, in milliseconds.

Acceptable value: Number

Default Value: 5000

Whether or not PSM text recording file will include each individual keystroke typed by the user.

Acceptable value: Yes/No

Default Value: Yes

Unique identifier of the rule to override.

Acceptable value: String

Whether or not Commands Access Control is enabled.

Acceptable value: Yes/No

Default value: No

A regular expression that represents the shell prompt of the target machines.

Acceptable value: String

Default value: (.*)[>#\\$]$

Whether or not authorized users can view and/or control live sessions that use accounts managed by this platform. The monitoring task is taken from the general live sessions monitoring settings.

Acceptable value: Yes/No

Default value: Yes

Defines the default connection component for direct transparent connections to remote machines.

Acceptable value: String

Defines the default connection component for connections via PSM.

Acceptable value: Defined connection component

A unique ID that defines the connection parameters.

Acceptable value: String

Defines the target connection protocol.

Acceptable value: String

Defines the application to open in the target machine\ connection.

Acceptable value: String

Defines the internal client that will open the target connection.

Acceptable value: String

The name of the parameter.

Acceptable value: String

The port used to connect to the remote device.

Acceptable value: Number

Default value: 3389

The authentication level that will be used for this connection.

Acceptable values: 0 – The PSM server is not required to authenticate the target machine before connecting to it.

The full path of the program that will be started when the PSM-RDP connection is initiated.

Acceptable value: Full path

The full path of the working directory for the program specified in the StartProgram parameter. If this property is not specified, the default working directory will be used.

Acceptable value: Full path

Default value: C:\Users\<current user>

Whether or not the PSM RDP session will stop when the Windows Events Audit or Universal keystrokes audit cannot be initialized.

Acceptable value: Yes/No

Default value: No

The number of milliseconds for the initialization connection for the Windows agents. This parameter is used when the TerminateOnWinAuditInitFailure is set to Yes.

Acceptable value: Number of milliseconds

Default value: 120,000

Whether or not the PSM RDP session will stop when the Windows Events Audit or Universal keystrokes audit is not working.

Acceptable value: Yes/No

Default value: Yes

How often PSM will check for new windows that were accessed on the target machine.

Acceptable value: Number of seconds

Default value: 0.05

The number of minutes for which a session will be kept alive when the Windows Events Audit or Universal keystrokes audit is not active.
When the specified amount of time has passed, PSM will decide whether or not to terminate the session according to the value specified in the TerminateOnWinAuditTimeout parameter.

Acceptable value: Number of minutes

Default value: 1

Whether or not trace logging to the Event Viewer on the target machine is enabled.

Acceptable value: Yes/No

Default value: No

The port used to connect to the remote device for SSH connections.

Acceptable value: Number

Default value: 22

The authentication level that will be used for this connection.

Acceptable value: A multiline sequence that defines an automatic sign-on process which uses a logon account to log onto a remote machine and then another account to elevate the user so that it can run sessions. The sequence uses regular expression prompts and responses with dynamic values based on the relevant account that can include one or more dynamic references. PSM reads these references in the following order: account properties, user parameters, then client specific parameters.

A send rate value in milliseconds that overrides the default send rate delay value, which determines the speed at which the client will send the login sequence keystrokes.

Acceptable value: Number of milliseconds

A timeout value in milliseconds that overrides the default prompt timeout value, which determines how long the client will wait for the next prompt to be received before displaying an error message and closing the session.

Acceptable value: Number of milliseconds

Configure the background color of an SSH session.

Acceptable value: black, red, green, yellow, blue, magenta, cyan, gray

Default value: No color

Configure the foreground color of an SSH session.

Acceptable value: black, red, green, yellow, blue, magenta , cyan , gray , dark_gray, bright_red, bright_green, bright_yellow, bright_blue, bright_magenta, bright_cyan, white

Default value: No color

Client specific parameter to enable or disable input sanitization.

Acceptable value: Yes/No

Default value: Yes

Client specific parameter to enable or disable output sanitization.

Acceptable value: Yes/No

Default value: Yes

The protocol used to create the connection to the remote device.

Acceptable value: String

Default value: Telnet

A multiline sequence that defines the automatic sign-on process using regular expression prompts and responses with placeholders for dynamic values that can include one or more dynamic references. PSM reads these references in the following order: account properties, user parameters, then client specific parameters.

Acceptable value: String

The authentication level that will be used for this connection.

Acceptable value: A multiline sequence that defines an automatic sign-on process which uses a logon account to log onto a remote machine and then another account to elevate the user so that it can run sessions. The sequence uses regular expression prompts and responses with dynamic values based on the relevant accounts that can include one or more dynamic references. PSM reads these references in the following order: account properties, user parameters, then client specific parameters.

A send rate value in milliseconds that overrides the default send rate delay value, which determines the speed at which the client will send the login sequence keystrokes.

Acceptable value: Number of milliseconds

A timeout value in milliseconds that overrides the default prompt timeout value, which determines how long the client will wait for the next prompt to be received before displaying an error message and closing the session.

Acceptable value: Number of milliseconds

Configure the background color of an SSH session.

Acceptable value: black, red, green, yellow, blue, magenta, cyan, gray

Default value: No color

The name of the parameter.

Acceptable value: String

Whether or not the application window will be locked on the screen.

Acceptable value: Yes/No

Default value: Yes

Used to identify the main window.

Acceptable value: String

Used to identify the main window.

Acceptable value: String

The time, in milliseconds, to wait for the application window to be displayed.

Acceptable value: Number

Default value: 8000