To ensure that all users have fair access to proxy resources and to enhance the efficiency of resources, the number of active simultaneous sessions for members of each PAM user group can be limited. 

If a user is part of multiple user groups, the session limit will be based on the lowest limit set among those groups.

If a user tries to exceed their session limit, they will receive the following message: 

“The maximum number of simultaneous sessions for the proxy **** has been exceeded. Please reduce your active sessions or try again later.”.

Users  > User Groups > [Related User Group] > Custom Properties > Add New Property 

 as a Parameter Key and give a number as value. 

If this parameter is not set, there will be no restrictions on the number of active sessions a user can have.

Learn how to limit user session durations with this helpful document. Discover the step-by-step process of setting time limits, including navigating to Device Groups, making changes in the nsso.properties file, and establishing an SSH connection. Find out

RDP Proxy Session Log Control 

Session Number Limitation a User Can Have on RDP

Adding a Web Page as a Device

HTTP Policy Configuration

HTTP Policy Realm

Web Browser Configuration

Desktop Client Configuration for HTTP Proxy

HTTP Proxy Configuration

Authenticating to HTTP Proxy

Web Portal Access

Container Logging Folder

Containerization of Web Browser

HTTP Proxy SSL/TLS Mode

Auto-Login with Global Username/Password

Auto-Login with Vault

Auto Login Configuration

Auto-Login via Basic Authentication

Auto-Login with Two Different Authentication URLs under the Same Web Server

Using webAppUrl Parameter from Web Browser

Auto-Login with Encoded Credential

Auto-Login for Kron PAM HTTP Proxy

Importing Unknown Domains as Bypass Domains

Using Vault Accounts on All HTTP Devices

XMLHttpRequest (XHR)

HTTP Proxy Assigned Credential Support

HTTP Proxy Logging Headers

Allow HTTP Proxy Access to SubDomains

HTTP Proxy Websocket Frame Length

Connector - HTTP Proxy Support

HTTP Proxy Logging

HTTP Proxy Certificate Settings

Managerial Approval for User Connections to HTTP/HTTPS Devices

X-Forwarded-For

Brute Force Protection

Passthrough Mode

Bypass the Certificate Intervention

Session Timeout

Automated Session Video Conversion and Export

Connection Reservation Usage on HTTP Proxy Auto-Login Feature

HTTP Proxy

3.8.0 Kron PAM Web GUI

License Manager

Email Server Configuration

Language Settings

Menu Lists Management

System Configuration Parameters

Enabling Push Notifications for Kron PAM Mobile Client Application

Enabling HTTPS on the Kron PAM Web GUI

Backup Management

SAML Authentication

Hardware Security Module (HSM) Integration

Windows Authentication on the Kron PAM GUI

PKI Authentication

SMS Configuration

Logo and Background Customization

Multitenancy

Kron PAM Administration

Manual User Creation

Kron PAM Users Search

User Actions Menu

Editing Kron PAM Users

Editing User Properties

Temporary User

Local User Bulk Import

New User Request

Force New User to Change Password 

User Password Strength Settings 

User Password Hash Algorithm Settings

Notifying Inactive Users Before Lock

LDAP/Active Directory Integration

User Group Creation

Assigned Credentials

SSH Keys Manager

User Management

Element Type

Device Groups

Device Inventory

Device Management

Policy Key Creation

Policy Groups Creation

Device Realm Creation

Policy Tracking

Policy Management

Managerial Approval for Connections 

Managerial Approval Connection Reservation

Managerial Policy Reservation

Managerial Approval for Commands

Managerial Approval in Shared Account Password Manager (Vault)

Approval Workflow

Approval Workflow SMS Settings

Approval Management

SSH Proxy

RDP Proxy

Advanced Authorization Methods

User and Entity Behavior Analytics

Session Manager

Password Vault

Application Token

Audit

Vault Agent

Secrets

Sending the MFA QR Code to Users

Creating a Connection Between Kron PAM and the Kron PAM Mobile Client Application

Enabling Multi-Factor Authentication (MFA)

Using MFA to Log in to the Kron PAM Web GUI

Using MFA to Log in to the Kron PAM Desktop Client

Using MFA for SSH Connections

Using MFA for RDP Connections

Using MFA for SSH Proxy

Using MFA for HTTP Proxy

Using MFA for SFTP Proxy

Using MFA for TACACS+ Manager

Using MFA for Radius

Using MFA for Kron PAM Mobile Client Application

Using MFA for Secure Remote Access

Offline Mode Settings

Using SMS for MFA

Using E-mail for MFA

User Token Management

Using Hardware Tokens for MFA

Using Authentication Key (FIDO Key) for MFA

Using Keystroke for User Behavior Analytics

MFA Configurations for VPN Services

External MFA Providers

Multi-Factor Authentication

Basic Configurations for Unified Access Management

MSCHAPv2 RADIUS Configuration

TACACS+ Management Configuration Page 

Unified Access Manager

Sensitive Data Discovery

SFTP Proxy

Data Access Manager

Importing Devices from Amazon Web Services

Importing Devices from Microsoft Azure

Importing Devices from the Google Cloud Platform

Cloud PAM

CSP Account Definition

Enabling CIEM Service

Cloud Infrastructure Entitlement Management (CIEM)

Creating Script Group

Creating Script

Adding a Script Realm

Running a Script

Privileged Task Automation Logs

Privileged Task Automation

Kron PAM Logs

Active Sessions and Dual Control

System Log Viewer

SIEM Configuration

Reports

Threat Analytics and Response Dashboard

Tamper-Evident Logging

Kron PAM Reporting and Logging Functions

Monitoring

Alarms

Alarm Configuration

Monitoring & Alarms

Watchdog Configuration 

Watchdog Mechanism

High Availability

Failover Scenario

Visualizing Reports and User Rights

Creating Charts for Reporting

Creating Dashboards

Scheduling Reports

Dynamic Reports

Reporting

Logical Architecture

Tenant Management Requirements 

Tenant Management Interface

Administration by Tenant Admins

System Config Manager Parameters for Multitenancy

DevOps Integration

Kron PAM Remote Access Portal

Secure Remote Access Connector

Remote Access Configuration in Kron PAM

Kron PAM Remote Access

APPENDIX 1: System Config Manager Parameters

APPENDIX 2: Job Descriptions for Job Scheduler

Reference Guide