BeyondTrust Privileged Remote Access Integration with BeyondInsight

Overview

Administrators can leverage the Privileged Remote Access Dashboard in the BeyondInsight console to view session details and reports of Privileged Remote Access sessions. Administrators who utilize the existing reporting functionality of /login can continue to view session details, reports, and session recordings in the /login interface.

Prerequisites

The following software is required:

  • BeyondTrust Integration Client (version 1.7.0 or greater)
  • BeyondInsight (version 6.10 or greater)
  • Privileged Remote Access (version 19.2.1 or greater)

Installation and Administration

 

To complete this integration, please ensure that you have the necessary software installed and configured as indicated in this guide, and account for any network considerations.

The Privileged Remote Access integration with BeyondInsight relies on the BeyondTrust Integration Client for session reporting data. BeyondInsight interacts with the Integration Client's BGSessions database directly.

A username and password are required to access the Integration Client's BGSessions database, and this user must have access to the BGSessions tables. We recommend this user have read-only access. Once the username and password are setup, follow the below steps to configure the database connection in BeyondInsight.

For more information on installing and using the BeyondTrust Integration Client, please see the Integration Client Guide .

Network Considerations

Outbound From

Inbound To

TCP Port

Purpose

Integration Client

Secure Remote Access Appliance

443

API calls from ECM

Integration Client

SQL Server Database (BGSessions)

1433

Store Privileged Remote Access session data

BeyondInsight

SQL Server Database (BGSessions)

1433

Query the BGSessions database to retrieve Privileged Remote Access session data