Per-device idle timeout configuration in Privileged Access Manager (PAM)
Article ID: 449205
Updated On:
Products
Issue/Introduction
This article clarifies the configuration capabilities for session and idle timeouts within CA Privileged Access Manager (PAM), specifically addressing whether these timers can be applied to individual target devices or specific servers.
- Settings: Global Settings > Basic Settings
Environment
- Product: CA Privileged Access Manager (PAM)
- Versions: All Supported Versions
Cause
This is a product inquiry regarding the granularity of timeout configurations for specific migration activities or device-specific requirements.
Resolution
Privileged Access Manager currently does not support the configuration of timeout values for specific target devices.
All timeout settings are global and apply to every session managed by the appliance.
Current Global Settings
The following timers are configured globally and cannot be overridden at the device or policy level:
- Login Timeout: Defines the maximum duration of a PAM user session.
- Connection Idle Timeout: Defines the maximum allowed inactivity before a target connection is terminated.
Modifying Global Timeouts
To adjust these values for all devices:
- Navigate to Settings > Global Settings.
- Select the Basic Settings tab.
- Update the Login Timeout or Connection Idle Timeout fields.
- Click Save.
Product Enhancements
If your business requirements necessitate per-device timeout controls, please submit an enhancement request (Idea) through the Broadcom Community. Product Management reviews these submissions during the release planning cycle.
- Ideation Portal:
- Category: Select Symantec Privileged Access Manager.
- Subscription: To stay updated on product changes, please .
Additional Information
- For detailed examples of how global timers interact, refer to: .
- To speak with a customer representative or a Support Engineer, see . Scroll to the bottom of the page and click on your respective region.
Feedback
