BeyondInsight / Password Safe

Hello everyone, I am having an issue in my enviroment, we have 2 RDS assets who has a load balancer between the PS Server and then. And the session hijacking is occurring only on application session, the access policies is already on the configuration to logoff on disconect, force termination and enhanced session auditing, I tested some ports in the load balancer that are used to deploy the ESA service, 445 and 139, and both were blocked, but even after the release the problem persisted, not all sessions suffer from this problem of session stealing, but it is a significant number that is impacting on the experience of using the tool. Someone can help me with any other alternative to avoid this problem? Thanks

The following articles were published last week. New Knowledge Base Articles: KB0021346 - MobaXterm SFTP side pane missing directories and file when doing Quick Connect session that are proxied through Password Safe KB0021989 - HA Error: Validate partner product configurations... The SQL Server account names which Endpoint Privilege Management is configured to use must match.

Need a report containing list of assets having no managed account

Need a report containing list of users having access to which assets through which managed account, I have already tried running Entitlement by User report but it does not meet my usecase.I need a single csv file containing the list of all the users having access to which all managed systems via which which managed account. Needed for compliance purpose, but this BeyondTrust PasswordSafe is unable to meet my criteria. I am clueless to know that this tool is PAM Leader in the market!!!

Hi Team,  Recently I’ve performed Discovery Scan during that time I have faced this below Issue.“discovery agents below version 20.1 are end of life, not supported for new scans and need to be updated” Are there any updation do we need to take ? or I need to check anything? Appriciate your support. Thanks!

Hello I did the upgrade to 24.3 as there was a KB which mentions that when the prompt ends with > , platform testing fails with account verification which is the behavior we are facing. we are still facing this issue even after upgrade to 24.3

Hi Team. What is the best practice for enabling the automatic password management for the functional account? Is it recommended to do so? and once it is enabled is it only going to rotate the password for the functional account or it will rotate all other managed accounts that are onboarded to Password safe? and how can we retrieve the password of functional account from the console once it is enabled? Appreciate your feedback on this?   

Hi. I have recently performed a detailed discovery scan against one asset, it completed successfully but I am not seeing any details for services, tasks etc etc. Scan was completed three hours ago.Is it normal to take a long time to get this information populated? Are there any logs I need to check to see why I am not seeing the details yet?   

Hi All,Is there anyone can brief us with the used smart rules used to automatically onboard local and domain accounts after discovery? this request is raised by a lot of customers, so if any one can brief and help.

Dear I am trying to update Beyondinsight, passwordsafe, and appliance management from BT updater but it is not able to downlaod the packages and in the passive node it neither able to display the passwordsafe available version. The idea is to go with offline installation. Is there any way to fix the BT updater and avoid go to offline? if no is there someone with the same issue and solved by going to offline installation? Please share your insights.

Hello Guys,Can we configure  password safe active-active deployment with minimum of two nodes as below ? Can UVM-1 act as both management & worker node ?     

HI Everyone, I have onboarded the local Linux accounts in PWA. But am looking for password rotation via PWA for non domain joined Linux accounts. Does any one have idea about local Linux accounts password rotation in PWA. If yes please suggest me on this. Thanks and looking for your quick support.Password Safe

Hi guys,Just want to clarify,how that asset based license works in password safe  ? For example, For one IP based asset ,If we establish a SSH connection to the OS, a web-based session to the application, and a desktop-based session to the database for the same virtual machine with the same IP address, is the license requirement one or three?Further according to the below article,total number of assets found in assets page utilizes the licenses .In that case what about the applications through RDS ? https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0019502  

Hi All,  For running detailed discovery scan, we need to open multiple ports between Password Safe Appliances/Resource Brokers and Target Systems. I wanted to understand whether those ports communication would be unidirectional or bi-directional?  RegardsMahendra

The following articles were published last week. New Knowledge Base Articles: KB0021706 - Enable password test agent box not staying checked when enabled KB0021901 - Error when launching a remoteapp session "The system cannot find the file specified" KB0021929 - How to configure Managed Account DSS key rotation

Hello Community, In a Password Safe active passive configuration scenario what factors determine the maximum number of concurrent RDP and SSH sessions? Are these influenced by hardware resources, system configurations or software restrictions? Best,Gavin

Hello Community,  Besides the usual server hardening best practices. Is there any advanced steps that should be taken to secure the Secret Cache Windows Servers? I’m looking forward to hearing everyone’s thoughts.  Best, Edward

Hi Team,We have Password Safe and PRA Integrated. We have some users who use both Password Safe and PRA to launch remote sessions.SRA Access Policy must have the View Password option enabled, so the users can retrieve the credential in PRA console. Because of this requirement in SRA access policy, users are able to view managed account passwords in Password Safe.How can we restrict users to NOT View Passwords in Password Safe and should be able to retrieve the credential in PRA Jump Session? Thanks,

The following articles were published last week. New Knowledge Base Articles: KB0021634 - What different ways can Service Now ticket system be integrated with BeyondInsight Password Safe? KB0021686 - Functional Account test fails. Error details openid-configuration: Service Unavailable KB0021896 - How to add sync Active Directory and asset descriptions to managed syst

Hi Guys,For remote applications through RDS (for example firewall session ),What is the best practice /method to use uploading files from user PC ? Further If the user need to copy downloaded files from web application (through RDS) to the user device, what is the best method ? 

In the active active configuration where we have management and worker nodes, how the PAM Worker node will recognize which network interface the communication will use ? thanks

Hello Team,Just wanted to know how to earn the certification and Badge of BCIE or passwordsafe admin certification through BT university? FYI, We have purchased the training modules and I would like to get certified in the above mentioned.Thanks,CS

We are planning to onboard all Cisco Catalyst switches and routers into PAM and manage the associated local accounts.Previously, I only onboarded Windows servers, so onboarding Cisco devices is new for me, and I’m unsure where to start.Do I need to create a functional account on all devices to perform detailed discovery? and what is after that? Any insights or recommendations would be greatly appreciated.Thank you.  

The following articles were published last week. New Knowledge Base Articles: KB0021913 - Resource Broker installation error: Install validation failed. Error details: Failed to validate resource broker limit. Status code Unauthorized. KB0021925 - RDP to Managed System Login failed. pbsm.log error: NTSTATUS: STATUS_NO_LOGON_SERVERS [0xC000005E] KB0021940 - Azure Dire

Hello all! I am trying to configure a use case which is to connect with SSH and RDP to the same Windows system through Password Safe. I have gone and tried testing this but it seems to be that Password Safe only supports 1 protocol and not 2 at the same time as even configuring duplicates in Password Safe makes it stick with whichever came first.Is this possible?