8.2.6 Video Off-Load

Privileged Account Manager audits all the privileged session operations in the form of keystrokes and videos based on the command control rule configuration. If you have enabled video capture in the rule, the video is generated in the agent where the session is running. In an agentless environment, such as SSH relay with X11 enabled, the video is generated in the SSH relay manager. After the video is generated, it is sent to the audit manager in the audit zone.

The video generation operation consumes more CPU if there are multiple concurrent sessions to the agent or SSH relay manager. Hence, Privileged Account Manager provides an option to configure a server (video off-load agent) exclusively for video generation operation. You can use a video off-load agent, when you are using SSH Relay, Application SSO, or when the agent has limited resources. When the video off-load agent is down, the conversion operation is performed on the Privileged Account Manager agent where the session is running.

Figure 8-1 The following illustrations explains the flow of the video generation process in an agent environment:

Figure 8-2 The following illustrations explains the flow of the video generation process with multiple audit managers: