Why can't I see a warning message for session recording ?

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

PAM is configured to show a session recording warning message

"Warning, you are being monitored"

When using the SSH applet or the RDP applet there is no warning message shown when logging in, but if using putty (as a TCP/UDP Service) then the warning message is shown. We have checked the configuration, and session recording is enabled and the warning message configured. So why is this happening?

Environment

PAM 3.2.X and higher

Resolution

One of the reasons this may not work is if the user is a member of a user group for which the Option to On the user group the "Applet record warning" setting was set to "no".

To enable it, please do the following

• Access PAM by means of a web browser or the PAM client as a user with admin rights (Super or equivalent)
• Go to the users menu and Choose Manage User Groups

 

 

• Choose the group or groups to which the user belongs. In Basic Info you may see something like:

In this case, RDP and SSH applets will not show the warning message, but the Putty service will continue to display it.

This may happen for instance if the user is part of a group imported from LDAP.

If you want to have the session recording enabled, toggle this setting to Yes.

Additional Information

Basic Info Configuration
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/privileged-access-manager/4-1-2/configure-policies-to-provision-user-access-to-devices-and-applications/OLD-configure-users/configure-user-groups.html
 
CSV features for users and groups
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/privileged-access-manager/4-1-2/reference/import-and-export-data-for-provisioning/user-groups-and-users.html