Hello Guys,

I’m new to BeyondTrust world but have fair understanding of PAM architecture.

I’m trying to understand the RDS server role in the Password Safe Cloud architecture. The current architecture shared by BT emphasises on Resource Broker and thats where I have clear understanding of Resource Broker from application & network perspective.

However, RDS Server is not covered in detailed in any document or article. I only understand that RDS Server is required for session management for non RDS/SSH connections. But, where does it fit in the architecture?

I assume the flow of Database session management may look like:

End user Workstation -→ Resource Broker (TCP/4489)  -→ RDS Server (TCP/3389)   --→ Database (e.g. TCP 1521/1433)

I’m keen to understand below points with respect to RDS Server:

1. Network requirements for RDS Server. Does it connect to any other component (PS Cloud) except Resource Broker & target system (DB etc.)
2. Does RDS Server store the session recording temporarily? if yes then how to calculate the disk storage based on the number of sessions?
3. Any detailed architecture including RDS server in it.

I have checked this link already:

https://beyondtrustcorp.service-now.com/csm?id=kb_article&sys_id=6cbde0af47ed5ed4b77b3ddbd36d4318&table=kb_knowledge

https://www.beyondtrust.com/docs/beyondinsight-password-safe/ps/cloud/security/architecture.htm

This may seem a silly question but here I’m :)

Thanks in advance!