5.2 Securing the PAM Manager

The following table helps you understand how you can secure the PAM manager.

Task

Information

SSH Relay

You can disable weak MAC Algorithms on a Secure Shell Server. Configured in ssh_config and sshd_config settings from Developer help or pages of ssh_config and sshd_config

Module level DB Encryption

See, Modifying a Host.

Audit database Encryption

See, Using Audit Settings

Oracle database specific SSL and TLS configuration

Although, Privileged Access Manager supports SSLv3 for older servers and clients, but the recommendation is to use the most current TLS version.