kaishum

hi Benoit!

That's awesome! An appreciate the feature! 😃

But do you have any more specific timeframe, like a month or a date? :P

Since we're looking to replace CyberArk, this feature is a must-have for rolling out Devolutions.

Kai

Hi,

Due to the security risk associated with sending credentials to the client where RDM is running, even if they are encrypted and ephemeral, there is still an encryption key that could potentially be used to recover the password.

It would be highly beneficial to have a feature that allows credential injection, at least from the PAM vault, directly from the gateway or a server inside the private network (similar to how the PSM server works in CyberArk).

This would significantly enhance security by ensuring that all passwords remain within the internal network, reducing the risk of exposure a lot more.

Kai

Hi,

ok thanks for the response, then this might be some feature update :)

To have a console on the recording server, to list and browse recordings.

It would be nice to see the commands running on the computer for SSH recording, maybe Powershell, etc. on Windows.

regards

Kai

Hi, it might be that this is possible, but I do not find it.

when we do some recording, we just test that we saved the recording files locally for now, but for SSH connection, is there any console/management to select and search for commands, etc ? or do we need to open the file? and search for commands the users have used in that session.

Hi,

in our organization, one users have a lot of different accounts, and all of our PAM accounts can also be used outside the "devolutions" system,

If each user shall be able to use the PAM account in other places they would need to be able to see the password each account has.

I know that Cyberark have this feature, where each user can see all their accounts and view passwords for 15-30 seconds

thanks

Hi, yes, one account for linked accounts, at least the option to select if we want to have the "merged" to be one account, with shared user vault :)

and thanks !

Hi Benoit!

that sounds great since such a thing will require fewer servers and maintenance.

today we have the DVLS

kai

will it be possible in the future to network segregate access to different subnets from the gateway, so we do not need to use more gateways than necessary?

as this example :

Gateway pool: have access to these subnets (10.10.10.0/24, 10.10.20.0/24, and 10.10.30.0/24),

and then use user groups to control access

• Admins would have access to all three subnets.

• The development would have access to only 10.10.30.0/24.

Thanks for the response!

well, the reason for the one vault for each user, even if it's linked, is that we have another PA to logon to Devolutions.

so if we switch logon, then we need to link the account we have in entraID with our PA we logon to devolutions and then we can use the same personal vault, right ?

hi,

The conditional access policies do not give us what we want, since we want to do a compliant security posture for client devices.

Will look into the f Microsoft Entra ID, but then we have to link accounts. then my next question would be, is it possible to just get one user vault for link accounts?

hi,

In the latest version of the remote desktop manager, we experience a huge CPU usage when using web sessions, and this is very noticeable when using VMware Vcenter.

downgraded the client to the previous version and then it is back to the normal

Hi,

Basically in RDM, but if both can be feasible, that would be great :D

thanks :)

Hi,

Thanks for this, we now have figured out the reason why all users saw all other users Pam vaults, and it is solved :D

Hi,

thanks for the response!

I have tried that, but it is still visible and other users can still see the users in it.

Our case is that we will have approximately 150 users at the start and each user will have about 10-20 PAM users in their vault.

These users are private users, that's why we want them to be invisible to all the other users.

we will also have some shared PAM users, this needs indeed to be visible to all

I want to create a PAM Vault visible only to the user who has access and the administrator(s).

Have also posted this in the forums, but from what I have seen it might be a new feature request?

Hi, I wondering how I can create PAM vault that is just visible for the users who have access to the vault and administrators ?

thanks !