Choose Between Active and Passive Jump Clients
Jump Clients allow for one of two modes of behavior, active or passive. The default mode can be set from the Jump > Jump Clients page, and the mode can be switched from the Jump interface of the representative console.
A Jump Client in active mode maintains a persistent connection to the BeyondTrust Appliance B Series, waiting for session requests. It sends statistics updates as frequently as once per minute, as defined in the Jump Client Settings on the Jump > Jump Clients page.
A passive Jump Client does not maintain a connection to the B Series Appliance but rather listens for connection requests. It sends statistics updates only once per day or upon manual check-in. By setting Jump Clients to passive mode, you can have a larger number of deployed Jump Clients without markedly increasing the B Series Appliance load.
If Console User is checked in Jump Clients > Jump Client Statistics, passive Jump Clients check in whenever they detect a new console user and report the user’s name.
In order to use a passive Jump Client, the B Series Appliance must be able to initiate contact with the computer on which the passive Jump Client is installed. This requirement might necessitate that you modify firewall rules to allow incoming connections to the target computer through the configured listen port. By default, this port is 5832; this can be modified from the Jump > Jump Clients page.
Passive mode may best be used on internal systems rather than external ones, although with correct firewall configurations, it can be used in either implementation. The following table presents key differences between the two modes.
The maximum number of Jump Clients available to an RS Virtual Appliance is based on allocated resources.