Session Recordings
Every session through a gateway is recorded. There is no separate recordings page in the sidebar. You open a recording from the item you want to review.
Where to Open Recordings
Choose Switch product → PAM first.
| Start from | Do this |
|---|---|
| Access Logs | Click the play icon in the Length column, or click a row and use Recordings in the drawer |
| Targets → Endpoints | Click the icon in the endpoint's Recordings column |
| Targets → Endpoint Users | Open the row menu and choose View Session Recordings |
| An endpoint's local users | Open the user's row menu and choose View session recordings |
See Access Logs.
The Player
A recording opens in a player. Replay the session as it happened.
The player shows an integrity badge:
| Badge | Meaning |
|---|---|
| Integrity intact | The recording matches what AuthNull received when the session ended |
| Integrity altered | The recording has changed since it was received |
| Integrity unknown | Integrity could not be checked |
warning
Treat an altered recording as a security event. Find out who had access to where recordings are stored.
Where recordings are kept is set in Recording Storage.