Skip to main content

Privileged Remote Access

Create identity-secure, just-in-time access to all your enterprise environments: cloud, on-premises, and OT.

80 Topics
S
samiTrailblazer
asked in General
PRA Jump Point Query

Hi,As we know, a Jumpoint server supports remote RDP, SSH, and Web Jumps to machines within the same network. Therefore, it is generally recommended to have a separate Jumpoint for each network.Given our setup:We have servers in both Azure and On-Prem environments. We have an ExpressRoute connecting Azure and On-Prem, providing a private connection between the two environments.Considering this private connectivity, do we still need separate Jumpoints in both Azure and On-Prem? Or, can we deploy a single Jumpoint in Azure, ensuring it has the necessary permissions and network access to establish RDP and SSH connections to On-Prem servers?Looking forward to your insights.

291
P
BeyondTrust Employee
H
HamzaTrailblazer
asked in General
PRA Atlas upgrade from 23.3.3/7.0.0 to 24.2.3/7.3.0

Hello All, We have on-prem PRA Atlas configured and planning to upgrade from 23.3.3/7.0.0 to 24.2.3/7.3.0. if we opt for Asynchronous upgrade method, as what I understand we have to:1- Break the Failover from Appliance A and upgrade Appliance B.2- Shift traffic to backup Appliance B.3-Upgrade Appliance A and re-establish the failover from appliance B (which is now primary ) and sync.4- Promote Appliance A to primary role. Between Step 1 & STEP 2, if there is/are any session logs/recordings on Appliance A, how we can safeguard those session logs/recordings as there is no failover relation ? and they might be lost once we sync from Appliance B (STEP 4) . anyone can suggest the better approach or any suggestions ? Thanks.

557
P
BeyondTrust Employee
H
HamzaTrailblazer
asked in General
Credential injection on ARUBA WEB login

we are using PWS and PRA, anyone facing issue with injecting credential from credential store to Aruba Web page login ? Account appears in credential store when attempting jump , but simple login page is launched.

564
H
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Feb 3 - Feb 10)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021973 - Remote Support and Privileged Remote Access 24.3.1 releases removed KB0021998 - Automatic critical update options in /appliance KB0022004 - Update to Base 7.3 or higher, stuck or not refreshing page when setting up Privileged Remote Access and Remote Support appliance

100
GloriaB
BeyondTrust Employee
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
PRA External (Password Safe) Jump Items - Jump Policies

Hi All,With Password Safe - PRA integration: Is there a way to apply the Jump Policies on the External Jump Items coming from Password Safe?

363
R
BeyondTrust Employee
K
K_jfApprentice
asked in General
SMTPS Config Info

With PRA and SMTPS, has anyone managed to acquire the following from BeyondTrust: Sender Policy Framework DKIMI’ve been requesting this as of late but with very little luck and it’s required in order to request an SMTPS configuration enabled from the cloud to our organization...

363
K
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Jan 27 - Feb 3)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021764 - Privileged Remote Access 24.3 feature show all Password Safe (PS) items in a Jump Point KB0021786 - Privileged Remote Access 24.3 feature start sessions with an entire Jump Group by right-clicking KB0021828 - Privileged Remote Access and Remote Support how to use Endpoint Automation KB0021850 - Failover fails after upgrading to Remote Support or Privileged Remote Access 24.1 and higher KB0021931 - How to create a team in Privileged Remote Access KB0021945 - LDAP Group OU queries returns more AD objects than expected when configuring an LDAP security provider in Privileged Remote Access KB0021950 - Can users rename a Jump Item in Remote Support or Privileged Remote Access? KB0021961 - How to create a Service Principal in an Entra ID domain services Account KB0021988 - Missing "Forgot Pass

200
GloriaB
BeyondTrust Employee
T
TZoltanRising Star
asked in General
PRA Access Console - Freezing

Hi,Has anybody experienced slowness with Access Console in v24.3.1?We have some reports that connections are established slower in 24.3.1, and some consoles are freezing too.Did anybody experienced similar issues?

762
T
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
PRA - Splunk Cloud SEIM Integration

Hi Team,For PRA - Splunk integration, do we have to configure both syslog feed in appliance and API configured in Web Console. SplunkWe already have configured API in web console for Splunk integration. Do we still need to configure it on the appliance as well? Thanks,

241
T
BeyondTrust Employee
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
PRA - Jumpoint Remote RDP Session Issue

Hi Team,When we launch the Remote RDP session from a Jumpoint from Desktop console or Web console, we are getting a blank screens. I can confirm that user is successfully logged into the system but the session on console UI is gray or white blank screens. attached the screen shots.Please advise if you have come across such issue.Thanks,

462
Prudhvi Keertipati
S
samiTrailblazer
asked in General
Unable to Create Jump Client Installer

Hi, I am unable to create the jump client installer. I don’t see the option when going to Jump > Jump Client. Am I missing something?  

755
S
X
xNourahxApprentice
asked in General
Granting access for a vendor

Hi Team,Recently, I became an admin for PRA and started working on it, but I need some clarification on certain points.For example, what is the workflow for granting a vendor access to a server?Currently, I have created the vendor account, but when I select Jump Items Matching Criteria, it shows a limited number of servers, and the server I’m looking for is not appearing.Any idea why this is happening? I’m sure I might have skipped some steps, as the admin guides are not very clear.Any guidance would be greatly appreciated.Thank you!

381
R
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Jan 20 - Jan 27)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021304 - Error installing a jump client on Ubuntu 24.04 failed to untar to unpack directory KB0021310 - System Restore option is not working in Special Actions in the Windows customer client KB0021338 - Jump Client icon and menu issues in Ubuntu 24.04 KB0021605 - How to remove a user in Remote Support and Privileged Remote Access KB0021964 - Jump client shows offline error "service not available" in the system tray KB0021973 - Remote Support and Privileged Remote Access 24.3.1 releases paused KB0021974 - Why is there scheduled maintenance stating - "Your SRA Cloud site is not appropriately sized for its usage level"?

210
GloriaB
BeyondTrust Employee
A
AnilreddyApprentice
asked in General
Local Linux accounts password rotation in PRA

HI Everyone, I have onboarded the local Linux accounts in PRA. But am looking for password rotation via PRA for non domain joined Linux accounts. Does any one have idea about local Linux accounts password rotation in PRA. If yes please suggest me on this. Thanks and looking for your quick support.

1374
C
B
BruceRApprentice
asked in General
PRA Web Jump - Downloads from website

Hi, we have a web jump to an internal finance sytem that can generate reports. Is there a way to allow the download of these reports ? ThanksBruce

574
P
BeyondTrust Employee
B
bt101Veteran
posted in General
Log Retention Period for Session Recordings

Just trying to see what is your current data retention period for Session Recordings. I understand this depends on various factors - compliance requirements, deployment size/usage , cost-benefit, Org maturity level   etc. But posting this to get a sense of how other users are managing it . We have around 60-90 days live on appliance, plus another 90 days on a network share. As the usage increases the session recordings data is growing exponentially. But at the same time investigations may require some historical data as well. 

642
B
S
ssethurajanApprentice
asked in General
X window forwarding using the X11

Vendor user is facing issues while trying to launch a shell jump session (via Jumpoint) from Mac endpoint. User is typing the below command to invoke the web console on the shell jump session but getting display error. Target Endpoint: Rocky Linux 8.9, 64-bitsystemctl enable --now cockpit.socket~]$ DataEditorError: DataEditor: Can't Open Display They also want to know if PRA shell jump supports X window forwarding using the X11 protocol. Any suggestions to resolve this problem?

621
P
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Jan 13 - Jan 20)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021305 - Missing expiry time for SSH-CA account in Vault checkout KB0021319 - "BT" Command Shell Display setting not saving correctly KB0021794 - Privileged Remote Access and Remote Support 24.3 OS certification matrix KB0021871 - Error "Memory swapping could indicate that this appliance is undersized for current workload" in /appliance KB0021941 - TCP Tunnel, Web Jump and Remote RDP connection types show as unavailable after upgrade KB0021943 - Not able to login with LDAPS Security Provider - Failed to test the provider

200
GloriaB
BeyondTrust Employee
B
badbeagleNewcomer
asked in General
pra V24.3 mapped network drives

The What’s New document said “Our zero trust Network Tunnels are capable of enabling mapped network drives for Windows workstations, so you can extend PRA’s centralized identity security controls to the entirety of your generalized networking needs. Trash that VPN!” Has anyone looked into this or tested it?  Tried searching the KB and technical docs but haven’t discovered anything yet.

611
DavidC
BeyondTrust Employee
S
samiTrailblazer
asked in General
PRA Deployment Questions

Hi everyone. Appreciate your feedback on the below queries.For PRA Cloud what is the communication matrix (firewall ports) that needs to be allowed for Jump Points, Jump clients and PRA to work smoothly?   For PRA Jump Points, what is the recommended hardware sizing (CPU, Memory, Disk) etc ?   Where the session recordings going to be stored? Is it going to be on the Jump Point or PRA cloud and in case if its going to be on the Jump Point what is the requirements for Disk storage?

10010
P
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Jan 6 - Jan 13)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021908 - Jump Clients are stuck pending upgrade after upgrading Remote Support or Privileged Remote Access to 24.3.1

550
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Dec 30 - Jan 6)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021323 - No Jump Items found match the search criteria message shows before showing the search results KB0021861 - Sync Error "Not available. Verify if the provider is enabled and it supports the requested operation."

250
GloriaB
BeyondTrust Employee
S
samiTrailblazer
asked in General
PRA Questions

Hi Everyone.I am new to PRA and have few questions that I would like to clarify. Appreciate your feedback on these.When we have PRA Cloud and On-Prem Jump Cluster deployed. Does the Jump clients communicate to PRA cloud via the Jump Points or they make a direct outbound connection to PRA cloud by default?    Typically each Jump Point handles around 25 concurrent connections? Are they also storing any session recordings locally? typically what should be the specifications for the Jump server for a mid size org like (CPU, Mem and Disk)? Is there any sizing calculator that we can use or some assumptions to take into consideration when determining the resources required for sizing the Jump Point?   If we have AWS and On-Prem servers, Can we do segregation for Jump Points? Like for Azure environment, deploy a Jump cluster there that would be specifically used to access servers deployed in Azure and Deploy another On-Prem Jump cluster that would be typically used to access servers deployed o

772
P
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Dec 23 - Dec 30)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021297 - Generic tokens and SSH accounts excluded from rotation summary message during bulk account rotation KB0021337 - Secure Remote Access Appliance certificates disappear after uploading a new one KB0021628 - Session termination behavior is not working in Privileged Remote Access and users are still appear as logged in after a session ends KB0021815 - Web Jump is timing out on Linux endpoint unable to produce logs

150
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Dec 16 - Dec 23)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021448 - OAuth email configuration error - Test email failed. Unknown error occurred ... [Code 451] or There was an error processing your request KB0021530 - The save filter option in the RS Rep Console or PRA Access Console and how to use it KB0021791 - Privileged Remote Access 24.3 feature static username and port sessions setting KB0021815 - Web Jump is timing out on Linux endpoint unable to produce logs KB0021843 - Is Remote Support and Privileged Remote Access compatible with Windows 11 ARM devices?

1210
GloriaB
BeyondTrust Employee

Badge Earners

  • BCA: Password Safe
    mcencienzohas earned the badge BCA: Password Safe
  • BCIE: Password Safe
    tmassimihas earned the badge BCIE: Password Safe
  • BCIE: Password Safe
    dmadahas earned the badge BCIE: Password Safe
  • BCA: Password Safe
    Murtuza Sadriwalahas earned the badge BCA: Password Safe
  • BCIE: Password Safe
    UngYonghas earned the badge BCIE: Password Safe
Show all badges
Terms & ConditionsCookie settings