What is PAM?

Briefly

PAM (Privileged Access Management) systems manage privileged access. They are designed to ensure secure connections for employees and external users to an organization’s servers and databases.

This includes secure access for various user roles: administrators and support specialists within your organization, as well as external auditors, experts, outsourcing companies, freelancers, integrators, and others.

JumpServer PAM connects users during authorized hours, hides all passwords, records connection sessions on video, and audits keystrokes and entered commands.

Purpose of JumpServer PAM.

JumpServer PAM serves three key purposes: managing traffic and accounts, ensuring secure connections, and monitoring and auditing activities.

• Account and Data Management: Automatically detects devices and user accounts, adding them to its database for faster rights configuration. Administrators don’t need to manually input them but only link them with access policies. JumpServer assigns access rights, audits changes, and schedules automatic password changes.

• Ensuring Secure Connections: Connections can be restricted by protocol type (HTTP, RDP, SSH, SFTP, web, etc.), IP addresses, connection time, approved requests, and allowed directions for file transfer and clipboard usage.

• Monitoring and Auditing Connections: Real-time auditing of database queries, file transfers, and SSH commands (with a dictionary of forbidden commands and queries). All entered commands and session videos are saved to dedicated local or external storage, while security events are sent to your SIEM system.

JumpServer PAM supports horizontal scaling, load-balanced deployment, and geographically distributed installations—allowing servers to be placed in remote data centers for disaster recovery. Clustering is available in all product versions, with options for «all-in-one» setups or deploying individual JumpServer components in the enterprise cloud for flexible load management.

Learn more about the available editions on the «Edition Comparison» page.

Access management

JumpServer PAM enables network access to be manageable, secure, and accountable while maintaining ease of use for employees and contractors.

The system automatically detects servers, services, and user lists—allowing you to simply choose which users are permitted to connect to selected servers and services, at what times, and under what conditions.

Learn more on the «Access Configuration» page.

Making life easier for users.

Privileged users in your organization often store passwords and keys for systems on local computers, where they can be intercepted and stolen.

JumpServer PAM provides these users with a management panel for quick, one-click connections to servers and services. There is no need to enter passwords or install additional software—users can connect through traditional clients or a standard web browser, even on a mobile phone:

• Passwords are not exposed.
• Connections are logged.
• In the event of a security incident, access for selected users can be revoked from all systems.
• During hiring or offboarding, granting or revoking access can be done in just a few clicks.

Learn more on the «Edition Comparison» page.

Secure contractor connections.

All you need to do is provide the contractor with a login and password for their personal account, and in JumpServer PAM, specify which servers they can access, at what times, and with what restrictions.

When working with external users, JumpServer PAM:

• Does not expose server and service passwords, preventing credential leaks;
• Allows connections only to a specific pool of servers and services;
• Restricts file transfers and clipboard access;
• Records all actions on video;
• Blocks execution of prohibited/unauthorized commands;
• Provides a convenient interface for connecting to servers and services via a web browser.

With a PAM system, connecting external users becomes a simple task with detailed reports for auditing and investigations.

Learn more on the «Connecting via Web Browser» page.