Skip to main content
Question

Question On-premises Environment PASM

  • November 6, 2025
  • 1 reply
  • 55 views

In an on-premises Password Safe and PRA environment using the PASM model:I have two jumppoint clusters in PRA.Is it possible to configure certain servers, for example, the production area, to establish connections through the PRD jumppoint cluster, and for development servers, to establish connections through the QA jumppoint cluster?Could you please guide me on whether I should create multiple workgroups in Password Safe and configure them in PRA, and if so, how?Thank you.

1 reply

  • BeyondTrust Employee
  • November 7, 2025

Hello ​@jesteban 

To answer your question on Password Safe / PRA integration and directing certain servers through a specific jumpoint cluster. 

The first way to direct a session through a specific jumpoint cluster is to set the specific cluster when creating the Jump Item Shortcut.
Where the integration comes into play is when your search for an external jump item from Password Safe. 
In Management | Security in the Access Console section when the "Jumpoint for External Jump Item Sessions" is set to "Automatically Selected by External Jump Item Network ID".

The Jumpoint is chosen by matching the "External Jump Item Network ID" set on your Jumpoint or Jumpoint cluster.


To the Workgroup Name in Password Safe.

So Assign your Prod assets to a Prod workgroup and your QA assets to a QA workgroup and set the "External Jump Item Network ID" of your jumpoint cluster to the same.