What is the “Safeguard for Privileged Sessions (SPS)” platform within SPP, and what is its intended use? I am trying to onboard the AdminSPS account in this platform and have configured the SPS IP as the network address. However, the test connection is…
User A and User B are in the same office location, using corporate laptops connected to the same internal network and sharing the same ip subnets and default gateway range.
User A logs into One Identity Safeguard On Demand (SPP) using a test (dummy) account…
At our customer site, One Identity Safeguard (SPP + SPS) is deployed on physical appliances:
SPP in cluster
SPS in HA
All privileged sessions are currently initiated via SPP
An external partner needs SSH access to the core banking system using…
One of our customers needs proof of documentation about the hardeing applied in SPP and SPS to complies PCI regulations.
They also ask about the Antimalware solution, if we as Safeguard have something deployed in SPP and SPS to protect us from antimalware…
I’m using One Identity PAM with both SPP and SPS components. I recently added a new domain () to the environment. SPP can successfully discover servers and accounts from the new domain, but SPS is unable to resolve the FQDNs of those servers.
Here…
Hi,
We created new RDP connection for new asset at SPP, however when tried connecting we discovered some old DNS record on our domain with another name and the same IP ADRESS . After cleaned the wrong record on DNS, still not possible to initiate RDP…
I'm currently working on configuring SSH settings in Safeguard for Privileged Sessions (SPS) version 8.0 and encountered some difficulty when trying to include hmac-sha2-256-etm@openssh.com and hmac-sha2-512-etm@openssh.com in the MAC algorithm list.…
I'm currently working on configuring SSH settings in Safeguard for Privileged Sessions (SPS) version 8.0 and encountered some difficulty when trying to include hmac-sha2-256-etm@openssh.com and hmac-sha2-512-etm@openssh.com in the MAC algorithm list…
Dear Community,
I'm currently working with a Safeguard environment running version 8 LTS. We have a scenario where a user accesses an SSH asset using their username and an SSH private key without a password.
During asset onboarding, I added the SSH…
Hello all.
When we access a server through Safeguard and we have the session recorded, if we request for elevated privilege (execute an app as Admin for instance), the elevated rights credentials pop up and SPS records the password typed in.
Is there…
Hello,
I have a cluster of SPP and SPS which have multiple network interfaces configured. I am configuring the log forwarding to an SSB, but which network interface is used by default for sending logs?
Thank you
Daniele
Hi there,
I'm reaching out to seek support for configuring Safeguard. Currently, in our setup on SPS:
We have a scenario where access to 2 jumphosts is possible via RDP. In the "safeguard_default" channel policy, we have enabled copy-paste.…
Hello all,
when trying to test the connection i get this error : "some paths were missing from the request body"
can any one please help ?
I've encountered a challenge with entitlements in SPP concerning user-to-server access mapping. With our configuration, individual domain accounts are set up to grant access to particular Windows Servers. However, when a user initiates a new request within…
Hello,
I'm using SPS 7.0.3.1 and I have a problem with some recordings playing the video. I have a user who only has rights to search for specific records. But when playing some recordings, a message pops up: The client is not authorized to access the…
Hello Experts,
When's end of Life for Safeguard 2000 Physical Boxes? We want to refresh our environment but analyzing options to make it future proof. is it recommended to move to new Safeguard 3000 boxes?
Regards,
Osman Yousuf
Hello Experts,
I am looking to have easy approval process for safeguard requests. Current flow I see has email notification and have to login to safeguard to approve, I'm looking to approve it directly from email if a button is possible or through mobile…
Hello,
If you organize the following scheme:
User(connect via ssh socks) --> SPS (enabled options for User: session-shell & local forward) --> Jump --> (remote server 1 & remote server 2)
SPS has session-shell and local forward options…
Hello,
If you organize the following scheme:
User(connect via ssh socks) --> SPS (enabled options for User: session-shell & local forward) --> Jump --> (remote server 1 & remote server 2)
SPS has session-shell and local forward options…
I couldn't find any clear documentation for Remote apps on how to configure or a use case. Will remote apps work for http/web traffic configuration ?
After upgrading to 7.0.2 we are seeing issue for functional accounts password change. Requests are being stuck with error. this was a working environment with 7.0 base LTS until the latest upgrade has been applied. I've verified in Assets AD sync is successfully…
Hello, where can I find out the curent number of protected hosts in SPS 7?
Hello Experts,
I am looking to add some URL's in Safeguard for control and record and would like to know is there anyway to achieve this? because I see only rdp and ssh/telnet options and not https in SPP. I have some Firewall that already are added through…
Dear Experts,
I am facing a problem when connecting to a Windows server through SPP. Below is the error which I am receiving.
“Remote Desktop Connection This computer can’t connect to the remote computer. Try connecting again. If the problem continues…
Hello Experts,
I've seen SPS can act as a gateway for connections coming from 3rd party client tools like termius etc. I've seen the SPS guide and did the configuration by creating a new connection (another IP) in SPS controls and added LDAP for integration…
