how sps works combination of session-shell and local forward options

Hi,

Here is the admin guide section on the supported SSH channel types:

https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-sessions/7.0%20lts/administration-guide/70#TOPIC-1831763

For each channel there is an option to record audit trail activities if this option is enabled:

https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-sessions/7.0%20lts/administration-guide/53#TOPIC-1831695

Thanks!

thanks
what information is recorded when the local-forward option is enabled?
I assume that the raw data, can you confirm this?

I looked into this further and found another case where Safeguard Desktop Player did not replay forwarded SSH channels, except x11. The reason is that the software cannot be prepared to parse any custom traffic in those channels as you can forward theoretically any communication over the network, and the player would not support such undefined scenarios.

You can however use the PCAP export option, which is in Safeguard Desktop Player, under Export / Export pcap and you'll get the raw network data from all channels for further processing.

Thanks!

I looked into this further and found another case where Safeguard Desktop Player did not replay forwarded SSH channels, except x11. The reason is that the software cannot be prepared to parse any custom traffic in those channels as you can forward theoretically any communication over the network, and the player would not support such undefined scenarios.

You can however use the PCAP export option, which is in Safeguard Desktop Player, under Export / Export pcap and you'll get the raw network data from all channels for further processing.

Thanks!