Symantec Privileged Access Manager v4.2.1 GA Announcement

CA Privileged Access Manager - Cloakware Password Authority (PA)

1 more products

25361

30 January 2025

30 January 2025

January 30th, 2025

To:          Symantec Privileged Access Manager Customers
From:     The Symantec Privileged Access Manager Product Team
Subject:  General Availability Announcement for Symantec Privileged Access Manager v4.2.1

On behalf of Broadcom, we appreciate your business and the opportunity to provide you with high-quality, innovative software and services.  As part of our ongoing commitment to customer success, we regularly announce updated releases and maintenance for our products.

Today, we are pleased to announce the availability of Symantec Privileged Access Manager v4.2.1.  This Release includes all maintenance published prior to this update. 

New Features in this release include:

PAM Gateway for SSH
This release introduces the PAM Gateway for SSH (SSH Gateway), which allows PAM users to establish SSH sessions to authorized terminal access target devices using an SSH client from their local host without the need for the PAM desktop client. 
 
SAML SSO Support for External Load Balancers That Are Not Included in the PAM Cluster Definition
You can now add external load balancers that are not already defined in your cluster configuration as SAML Assertion Consumer Service (ACS) endpoints in the PAM SP metadata.
 
OAuth Authentication for ServiceNow PAM Connections
As ServiceNow administrator, you now have the option to require the OAuth method of authentication with your PAM connections. This method is considered phishing resistant.
 
Log in to Web Applications that Have Nested Web Pages
As PAM administrator, you can support the ability to log in to web applications that have nested web pages. You can enable PAM learn-mode on successive web login pages, so that you can use PAM to manage nested web page logins.
 
New Flags Prevents Opening an SSH/RDP Session Outside PAM
This release introduces two new flags to help increase security:
  • The required_checkout flag specifies that the account must use PAM Access page to log in to the endpoint.
  • The use_original_identity flag specifies that PAMSC uses the name of the original user logged in to PAM, not the name of the privileged account, when it makes authorization decisions.
    These flags can prevent any session to the server that does not originate from PAM. For example, a malicious user, even if they have the root password, can not open an SSH session outside PAM.
     
    Terminate Active RDP or SSH Connections Associated with a PVP
    The Force check-in after option determines when PAM terminates all the active, exclusive check-out sessions associated with a particular Password View Policy (PVP) time interval. You do this by specifying when the interval (in minutes) completes. For example, if you specify 60 minutes, PAM terminates all the active sessions associated with this particular PVP when this 60 minutes completes. 
     
    Specify the Default LDAP Domain Appearing on the Login Screen
    The new Default LDAP Domain option specifies the default LDAP domain that appears on the Login screen. If you do not have any LDAPs configured in PAM, this field value appears as Not Configured.

    Add a Download PAM Agent Button on the PAM UI Login Page
    You can determine whether to display the Download PAM Agent button on the PAM UI login page. If enabled, the button appears in the Symantec PAM Agent section below the white panel on the login page when accessing PAM using a web browser.

    For a complete list of features, please visit https://techdocs.broadcom.com.

    Please visit the Symantec Privileged Access Manager product information page on the Broadcom Support Online website at https://support.broadcom.com/ for detailed information concerning this Service Pack, up-to-date support information, and the latest technical bulletins. 

    You can download your copy of Symantec Privileged Access Manager v4.2.1 from Broadcom Support Online:

    https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/release-announcements/CA-Privileged-Access-Manager-Solutions--Patches/5929

    If you have any questions or require assistance please contact Broadcom Customer Care online at https://www.broadcom.com/support/software/contact where you can submit an online request using the Customer Care web form: https://ca-broadcom.wolkenservicedesk.com/web-form?_ga=2.205828371.1432263889.1590607313-713014253.1588711301.  You can also call Broadcom Customer Care at +1-800-225-5224 in North America or see https://www.broadcom.com/support/software/contact for the local number in your country. 

    Your success is very important to us, and we look forward to continuing our successful partnership with you.