Management Server
Indeed PAM components
- Indeed PAM Core
- Indeed PAM IdP
- Indeed PAM Management Console
- Indeed PAM User Console
- Indeed Log Server
- Indeed PAM EventLog
Software requirements
Operating system:
- Windows Server 2012/2012 R2
- Windows Server 2016
- Windows Server 2019
Internet Information Services 7.0 and higher, with the following modules:
- Static Content
- HTTP Redirection
- ASP.NET 4.5
- .NET Extensibility
- ISAPI Extensions
- ISAPI Filters
- Basic Authentication
- Windows Authentication
- IIS Management Console
Additional Microsoft components:
- Microsoft .NET Core 3.1 Hosting Bundle
- URL Rewrite (IIS extension)
DBMS supported:
- Microsoft SQL Server 2012 SP2 - 2017, any edition
- PostgreSQL Pro 11 and later
Hardware requirements
| Components | Requirement |
|---|---|
| CPU | 2 Cores |
| RAM | 4 GB |
| HDD | 60 GB |
Access Server
Indeed PAM Components
- Indeed PAM Gateway
- Indeed PAM SSH Proxy
- Indeed ESSO Agent
- Indeed Admin Pack
Software requirements
Operating system:
- Windows Server 2012/2012 R2
- Windows Server 2016
- Windows Server 2019
Additional Microsoft components:
- Microsoft Windows Desktop Runtime 3.1
Additional Indeed-ID components (Web sessions/Client application sessions):
- Indeed-Id SSO Agent
- Indeed-Id Admin Pack
Browser (Web sessions/Client application sessions):
- Microsoft Internet Explorer
- Google Chrome
Role:
- Remote Desktop Session Host
Hardware requirements
| Components | 1 - 20 RDP/SSH sessions | 21 - 50 RDP/SSH sessions | 51 - 100 RDP/SSH sessions |
|---|---|---|---|
| CPU | 12 Cores | 24 Cores | 46 Cores |
| RAM | 8 GB | 16 GB | 32 GB |
| HDD SATA/SAS | 1 x 60 GB | 2 x 60 GB | 2 x 120 GB |
| RAID | - | + | + |
Network adapter | 1 Gb | 1 Gb | 1 Gb |
File storage
Media data storage
You can use any network storage within the Active Directory domain to store video files.
Required disk space is calculated based on the following conditions: concurrent sessions of 20/50/100 users, duration of working day is 8 hours, recording time 30 days. The average size of one hour of video recording is 60 MB.
| Component | 20 RDP/SSH sessions | 50 RDP/SSH sessions | 100 RDP/SSH sessions |
| HDD | ~ 300 GB | ~ 750 GB | ~ 1,5 TB |
Shadow copy file storage
Any server that is part of an Active Directory can be used as a storage for shadow copies of files. The size of disk space is calculated individually, and will depend on the intensity of copying files to destination servers, and on the size of the transferred files.
Network connectivity
Active Directory Domain Services
Indeed PAM Management Console, User Console, and Indeed Log Server components may not be part of Active Directory.
Other Indeed PAM components will require access to Active Directory Domain Services.
| Active Directory Domain Services | Incoming and outgoing | |
|---|---|---|
| TCP/UDP 53 | DNS | |
| TCP/UDP 389 | LDAP | |
| TCP 636 | LDAPS | |
| TCP 3268 | Microsoft Global Catalog | |
| TCP 3269 | Microsoft Global Catalog SSL | |
| TCP/UDP 88 | Kerberos | |
| TCP/UDP 464 | Kerberos | |
Operating system:
- Windows Server 2012/2012 R2
- Windows Server 2016
- Windows Server 2019
Internet Information Services 7.0 and higher, with the following modules
- Static Content
- HTTP Redirection
- .NET Extensibility
- ASP.NET 4.5
- ISAPI Extensions
- ISAPI Filters
- Basic Authentication
- Windows Authentication
- IIS Management Console
Additional Microsoft components:
- ASP.NET Core/.NET Core 2.0.9
- Microsoft Visual C++ 2015 Redistributable x64
Microsoft SQL Server:
- Microsoft SQL Server 2012 SP2 - 2017, any edition
- PostgreSQL Pro 11 and later
Hardware requirements
Hardware requirements are identical to the ones for operating systems that the product is running at
Indeed PAM Management Console/User Console
Software requirements
Operating system:
- Windows Server 2008 R2
- Windows Server 2012/2012 R2
- Windows Server 2016
- Windows Server 2019
Internet Information Services 7.0 and higher, with the following modules:
- Static Content
- HTTP Redirection
- ASP.NET 4.5
- .NET Extensibility
- ISAPI Extensions
- ISAPI Filters
- Basic Authentication
- Windows Authentication
- IIS Management Console
Additional Microsoft components:
- URL Rewrite (extension for IIS)
Browser:
- Google Chrome
- Mozilla FireFox
- Microsoft Internet Explorer
- Microsoft EDGE
Hardware requirements
Hardware requirements are identical to the ones for operating systems that the product is running at
Indeed Log Server
Software requirements
Operating system:
- Windows Server 2008 R2
- Windows Server 2012/2012 R2
- Windows Server 2016
- Windows Server 2019
Internet Information Services 7.0 and higher, with the following modules:
- Static Content
- HTTP Redirection
- ASP.NET 4.5
- .NET Extensibility
- ISAPI Extensions
- ISAPI Filters
- Basic Authentication
- Windows Authentication
- IIS Management Console
Microsoft SQL Server:
- Microsoft SQL Server 2012 SP2 - 2017, any edition
- PostgreSQL Pro 11 and later
Hardware requirements
- Hardware requirements are identical to the ones for operating systems that the product is running at
Indeed PAM Agent
Software requirements
Operating system:
- Windwos XP SP3
- Windows 7 SP1
- Windows 8
- Windows 8.1
- Windows 10
- Windows Server 2008 SP2 (with KB980368)
- Windows Server 2008 R2 SP1
- Windows Server 2012/2012 R2
- Windows Server 2016
- Windows Server 2019
Microsoft components (Windows XP):
- Windows Management Framework Core
- Microsoft .NET Framework 3.5 SP1
- Microsoft Installer 4.5
Hardware requirements
- Hardware requirements are identical to the ones for operating systems that the product is running at
Networking requirements
Active Directory Domain Services
Indeed PAM Management Console, User Console and Indeed Log Server components might be installed beyond the Active Directory bounds.
All the other Indeed PAM components require access to Active Directory Domain Services.
| Component | Protocol/ Port | Description | ||||
|---|---|---|---|---|---|---|
| Active Directory Domain Services | Inbound and outbound | |||||
| TCP/UDP 53 | DNS | |||||
| TCP/UDP 389 | LDAP | |||||
| TCP 636 | LDAPS | |||||
| TCP 3268 | Microsoft Global Catalog | |||||
| TCP 3269 | Microsoft Global Catalog SSL | |||||
| TCP/UDP 88 | Kerberos | |||||
| TCP/UDP 464 | Kerberos | |||||
Summary networking table
| Component | Protocol/Port | Description | Protocol/Port | Description | ||||
|---|---|---|---|---|---|---|---|---|
| Indeed PAM Core | Inbound | Outbound | ||||||
| TCP 80/443 | Indeed PAM Management Console Indeed PAM User Console Indeed PAM Gateway | TCP 80/443 | Indeed Log Server Indeed PAM IdP | |||||
| TCP 5985/5986 | WinRM - service operations at resources (Windows) | |||||||
| TCP 445/139 | Net use - service operations at resources (Windows) | |||||||
| TCP 22 | SSH - service operations at resources (Unix\Linux) | |||||||
| TCP 1433 | Microsoft SQL Server | |||||||
| UDP 1434 | Microsoft SQL Server | |||||||
| TCP 5432 | PostgreSQL Pro | |||||||
| TCP 445 | Access to network media data storage | |||||||
| Indeed PAM Gateway | Inbound | Outbound | ||||||
| TCP 3389 | RDP connection of end-user | TCP 80/443 | Indeed PAM Core Indeed PAM IdP | |||||
| TCP 3389 | RDP connection to end resources (Windows) | |||||||
| TCP 22 | SSH connection to end resource (Unix\Linux) | |||||||
| Indeed PAM IdP | Inbound | Outbound | ||||||
| TCP 80/443 | Indeed PAM Core | TCP 1433 | Microsoft SQL Server | |||||
| UDP 1434 | Microsoft SQL Server | |||||||
| TCP 5432 | PostgreSQL Pro | |||||||
| Indeed PAM Management Console | Inbound | Outbound | ||||||
| TCP 80/443 | Logon to management console | TCP 80/443 | Indeed PAM Core Indeed PAM IdP | |||||
| Indeed PAM User Console | Inbound | Outbound | ||||||
| TCP 80/443 | logon to self-service | TCP 80/443 | Indeed PAM Core Indeed PAM IdP | |||||
| Indeed Log Server | Inbound | Outbound | ||||||
| TCP 80/443 | Indeed PAM Core | TCP 1433 | Microsoft SQL Server | |||||
| UDP 1434 | Microsoft SQL Server | |||||||
| TCP 5432 | PostgreSQL Pro | |||||||
| Resources (Windows) | Inbound | Outbound | ||||||
| TCP 3389 | RDP connection of end-user | |||||||
| TCP 5985/5986 | WinRM - service operations | |||||||
| TCP 139/445 | Net use - service operations | |||||||
| Resources (Unix\Linux) | Inbound | Outbound | ||||||
| TCP 22 | SSH connection of end-user/service operations | |||||||
Networking scheme
