8.1. Device access

This chapter looks at the Device access report page and the information that can be found on the page. The following topics are included in this chapter:

8.1.1. Device access report

The Device access report provides an audit of PxM users that have logged in to the PxM Client at any point and the device connections that have been made.

WebUI Device access report table

The Device access report also allows you to view filtered screenshots from PxM Client user sessions and monitor or terminate any active connections.

Note

To view filtered screenshots and monitor connections, session recordings must be enabled for, and agreed to by, the PxM user.

For more information, see Privileged Session Management.

To view the Device access report:

  • In the Web Management Interface, click Device access. The Device access report will appear.

  • In the top area of the Device access report, use the checkboxes to select one or more of the following categories to be displayed on the report:

    • PxM Client sessions
    • Device connections
    • Screenshots

    Note

    By default, only Device connections is selected.

8.1.1.1. Terminate active PxM Client sessions

To terminate active PxM Client sessions:

  1. In the top area of the Device access report, select PxM Client sessions or Device connections.

  2. Within the table, select one or more active sessions.

    Note

    Active sessions are indicated ACTIVE in the End time column and marked Checked box icon in the Active? column.

  3. Click the Terminate button. The Question window will appear.

    Webui session termination notification

  4. If you want to prevent the selected user(s) from logging back onto the PxM Client after termination, select Also disable the users [names].

  5. Click Yes.

  6. The selected user(s) will be logged out of PxM and receive the following notification:

    Webui session termination confirmation


8.1.2. Device Connections report

The Device connections report provides visibility of all device connections made through PxM.

On the Device access report page, click the Device connections checkbox to view this report.

The following information is presented in the Device connections report:

Heading Description
ID Shows the unique channel ID relating to the connection made by the user.
Session ID Shows the unique PxM Client connection ID made by the user.
Start time The date and time a device tool session was first accessed by the named user.
End time The date and time a device tool session was closed by the named user, or indicates if the session is still ACTIVE.
Play iconArchive screenshot icon A play icon in this column indicates that the session has been recorded. An archive screenshot icon in this column indicates that the session has been archived and, therefore, cannot be played. Retrieve the file from the Manage files page to view.
Shadow icon A shadow icon in this column indicates that the session is still active and can be viewed in real time.
Duration Total time the device session was active.
Active duration Total time the session that is currently alive has been active.
Device The name of the device that was accessed by a PxM user.
User IP address The IP address of the connected PxM user’s computer.
User Name of the PxM user who initiated the connection.
Access level The privilege level access token used by the PxM user to access the device.
Protocol Connection method used to access the device.
Active?

Indicates the current status of the session.

Checked box icon is active and means the device tool is still being accessed by a PxM user.

Unchecked box icon is inactive and means the device tool has been closed and the user is no longe has a single sign-on connection to the device using that protocol.

Recorded?

Relates to Privileged Session Recorder and if ticked, indicates that device session was recorded.

Whether or not a device session for a user is recorded is determined through a Profile and ‘Record session on this profile’ task.

See Privileged Session Management.

Change tickets Lists the change tickets the device connection was conducted under.

8.1.3. PxM Client sessions

Selecting PxM Client sessions lists all the user connections made to the PxM Client and the number of devices accessed during the logon.

WebUI Device access DC sessions table

The following information is presented in the PxM Client sessions report:

Heading Description
Session ID The unique PxM Client connection ID.
Start time The date and time the user logged onto the PxM Client.
End time The date and time the user logged off the PxM Client. ACTIVE indicates that the user is still logged onto PxM.
Duration The total time the user was logged into the PxM Client.
User Name of the PxM user who initiated the connection.
# Device connections The number of device connections the user has made through the PxM Client.
User IP address The IP address of the connected PxM user’s computer.
Active? A selected check box indicates that the PxM user is still logged onto the client.
Archived?

A selected check box indicates that the recorded screenshots have been archived to a ZIP file which can then be downloaded through the Manage files page.

Note

For more information, see Manage Files.


8.1.3.1. Archive screenshots

PxM sessions can be archived on an individual basis. This allows you more flexibility in how you can manage your archiving and group files as required before archiving.

To archive screenshots from PxM sessions:

  1. In the Device access report page, select PxM Client sessions.
  2. On the PXM CLIENT SESSIONS table, click one or more users.
  3. Click Archive screenshots. The Question window appears.
  4. On the Question window, click Yes to confirm that you want to store the screenshots from the user PxM sessions in your files list. The Action queue window appears.
  5. On the Action queue window, click Done. The archived screenshots will be located in the Manage files page.

Note

Only inactive PxM sessions can be archived.

8.1.3.2. Exporting videos

Device connections recorded session videos can be exported on an individual basis. Clicking on the Export video button allows you to download and save the video (mp4 file). The file can then be downloaded from the Manage files page.

Before videos can be exported, devices must be highlighted in the list.

Fuzzy filter

The fuzzy filter enables you to search keywords inside recorded connections to find specific changes/updates that have been made on a device.

The search term is matched against:

  • The keystrokes of a connection.
  • The titles of a recorded connection window, i.e. SSH window or web browser, etc.

Note

The window refers to the local tool opened to access the device.

8.1.4. Screenshots

The SCREENSHOTS section shows the session recorded screenshots, starting with the latest. If screenshots have been archived, they will no longer be shown here. Archived screenshots can be downloaded from the Manage files page.

From the Device access report, select Screenshots.

Webui filtered screenshots

Screenshots can be grouped by:

PxM Client session Shows all the screenshots relating to connection made to the PxM Client only and the devices accessed during the logon.
Device connection Shows all the screenshots relating to protocol connection types that have been made from the PxM Client.
None Shows all screenshots recorded by PxM.

8.1.4.1. Live monitor

The Live monitor window allows you to shadow all the active connections.

Note

Only device connections that are within profiles with Session Recording enabled can be shadowed.

For more information, see Privileged Session Management.

To Live monitor a session:

  1. In Device access report > SCREENSHOTS, click the Live monitor button.

    Webui Live Monitor

  2. Double-click on a device connection. A Session player window will open for you to shadow the active device connection session.

    Webui Session Player

The functions are available within the Session player window:

Section Button heading Description
Transport Transport start icon First Takes you back to the start of the recording.
  Transport previous icon Previous Takes you back to the previous frame played.
  Play icon Play Plays the session recording from the start.
  Transport next icon Next Takes you to the next frame.
  Transport last icon Last Takes you to the end of the recording.
Playback speed  

Playback speed from the moment the frame is loaded but will depend on the overall system speed.

Normal: 1 second

Fast: 0.5 second

Fastest: 450 milliseconds

  Shadow icon Shadow To start or stop shadowing of the active session.
Zoom Actual Shows the actual size of the window when recorded.
  Fit Resizes the recording window to fit the Session Viewer screen so you can see the whole recorded window.
Timeline bar   Indicates the time as the recording is played and allows you to scroll quickly to a specific time.

Within the Live monitor window, you can also:

  • Hold inactive: allows you to keep disconnected sessions visible for 60 seconds after they become inactive.
  • Group by: allows you to filter the active sessions by PxM Client sessions or Device connections.
  • Zoom bar: allows you increase or decrease the size of the active session windows listed.