---
title: OT/ICS Session Manager
slug: kronpam-reference-guide-3-9-0/otics-session-manager
docTags: 
createdAt: 2026-05-11T09:52:34.994Z
---

The OT/ICS Session Manager allows Kron PAM to manage, monitor, and audit generic TCP-based connections that do not fall under specific protocol handlers (like SSH or RDP). It acts as a bridge between an operator and a target device in the OT or IT environment, providing full visibility and control over the raw traffic.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/QJHkVprNO5f8SgbiFVEIA_image.png)

The OT/ICS Session Manager is designed to facilitate secure access to specialized applications, such as Human Machine Interface (HMI) servers or industrial controllers (PLC/RTU), by tunneling TCP traffic through the Kron PAM gateway. This ensures that even non-standard protocols can be audited and recorded.

·         **Protocol Neutrality:** Supports any application communicating over TCP.

·         **Session Auditing:** Logs session start/end times and tracks user activity.

·         **Traffic Capture:** Generates PCAP files for deep packet inspection and forensics.

·         **Active Session Management:** Allows administrators to monitor and terminate live TCP streams.