Skip to main content

Session monitor connectivity

The following options on the Recorded session tab control how the session monitoring clients connects with the Bravura Security Fabric server.

Option

Description

SMON HTTP CERT VALIDATION

When enabled, the session monitoring client will validate the certificate from the Bravura Security Fabric server when connecting over an SSL connection.

SMON HTTP HEART BEAT FREQUENCY

Frequency in seconds that the client will send a signal to the server to indicate that it is still running. The default is 30 seconds.

SMON HTTP POST SIZE LIMIT

The limit on data sent from the ActiveX control or persistent client to smonc . The smonc program is the high performance CGI program that receives information from workstations.

SMON HTTPP ROXY SERVER

The proxy server used by the session monitor client when trying to connect to the server.

SMON HTTP TIMEOUT

The time in seconds that the session monitor client will try to establish a connection with the server before giving up. The default is 30 seconds.

SMON HTTP URL

The session monitor client connects using this fully qualified URL to smonc on a Bravura Security Fabric server. The smonc program is the high performance CGI program that receives information from workstations.

The default SMON HTTP URL is <BASE IDSYNCH URL>/<virtual directory>/smonc.exe. The BASE IDSYNCH URL is set at Manage the system > Workflow > Email configuration .

If this is incorrect, ActiveX controls will not be able to connect to the server, and as a result, will not allow the remote connection to the managed resource to proceed. For troubleshooting tips, see Troubleshooting .

SMON NETWORK FAILURE RETRY LIMIT

The number of failed connection attempts that a session monitor client can make before Bravura Security Fabric determines there is a network failure.

The default is two attempts.

SMON NETWORK FAILURE TERMINATE

When enabled, terminates the remote connection if the network fails; that is, collected data can no longer be sent to Bravura Security Fabric server. This is disabled by default.

SMON STALE SESSION TIMEOUT

Mark sessions as stale if they have not contacted the server in this many seconds. The default is 120 seconds.

Connectivity messages

The following settings affect messages displayed to users when certain events occur when session monitoring is initiated:

Option

Description

SMON NETWORK FAILURE TERMINATE MSG

Message to display to users when their connection is terminated due to a network failure. The message is controlled by the !!!SMON_NETWORK_FAILURE_TERMINATE_DEFAULT_MSG M4 tag, which by default displays in English: “Connectivity to Bravura Security Fabric server was lost.Connection terminated.”

SMON NETWORK NO CONNECTION MSG

Message to display to users when the client cannot contact the Bravura Security Fabric server, and access is not granted. The message is controlled by the !!!SMON_NETWORK_NO_CONNECTION_DEFAULT_MSG M4 tag, which by default displays in English: “Failed to connect to Bravura Security Fabric .Please contact the Bravura Security Fabric administrator.”

SMON TERMINATE BY ADMINISTRATOR MSG

Message to display to users when their connection is terminated by an administrator. The message is controlled by the !!!SMON_TERMINATE_BY_ADMINISTRATOR_DEFAULT_MSG M4 tag, which by default displays in English: “Connection was terminated by an administrator.”

Troubleshooting session monitor connectivity

Connectivity to monitoring service could not be established

If you have trouble connecting to the monitoring server when initiating a session, try using the process explorer program, procexp.exe, to analyze processes on the system. You can download this program from live.sysinternals.com.

If you have trouble connecting to the monitoring server when initiating a session, try using the logutil program to collect logging information from the ActiveX controls. To do this, run the following command on the system where the ActiveX controls are being run from:

logutil.exe -instance "PPM Client ActiveX Controls" -level 6 -maxdelay 2 -makekey

Confirm the URL used in the connection. Most connection failures are the result of a misconfiguration in the URL, SSL, certificate validation, or proxy settings.

If the SMON HTTP URL is incorrect, the ActiveX controls will not be able to connect to the server, and as a result, will not allow the remote connection to the managed resource to proceed.

When a client using pswxcmd or pswxtsvc cannot communicate with the server via the SMON HTTP URL, the following message is displayed on the client:

"Failed to connect to Bravura Security Fabric server. Please contact the Bravura Security Fabric administrator."

Fix the URL so that it resolves for all client workstations. You can test it by copying and pasting the value into the web browser location field in the web browser. If a page loads with an encrypted blob then it worked (encrypted blobs start with {AES} ). Typical errors would be: server not found, or 404 Page Not Found.

The server not found error means the first part of the SMON HTTP URL does not resolve correctly; the hostname or IP of the server is not accessible from client.

The 404 Page Not Found error typically means that the wrong hostname or IP was used (it went to a web server other than the one with the Bravura Security Fabric instance installed). It could also hint that the virtual directory is incorrect, or that HTTP/HTTPS is incorrectly specified. The virtual directory is set during setup.

Cannot download session package for auditing

In order to download a session package, the client workstation must be able to resolve the URL of the server on which the package was created. If clients connect to the server using a load balancer, the client may not be able to download the package.

Alternatively, you can provide a separate, externally addressable name of the server.