Session monitor connectivity
The following options on the Recorded session tab control how the session monitoring clients connects with the Bravura Security Fabric server.
Option | Description |
---|---|
SMON HTTP CERT VALIDATION | When enabled, the session monitoring client will validate the certificate from the Bravura Security Fabric server when connecting over an SSL connection. |
SMON HTTP HEART BEAT FREQUENCY | Frequency in seconds that the client will send a signal to the server to indicate that it is still running. The default is 30 seconds. |
SMON HTTP POST SIZE LIMIT | The limit on data sent from the ActiveX control or persistent client to |
SMON HTTPP ROXY SERVER | The proxy server used by the session monitor client when trying to connect to the server. |
SMON HTTP TIMEOUT | The time in seconds that the session monitor client will try to establish a connection with the server before giving up. The default is 30 seconds. |
SMON HTTP URL | The session monitor client connects using this fully qualified URL to The default SMON HTTP URL is If this is incorrect, ActiveX controls will not be able to connect to the server, and as a result, will not allow the remote connection to the managed resource to proceed. For troubleshooting tips, see Troubleshooting . |
SMON NETWORK FAILURE RETRY LIMIT | The number of failed connection attempts that a session monitor client can make before Bravura Security Fabric determines there is a network failure. The default is two attempts. |
SMON NETWORK FAILURE TERMINATE | When enabled, terminates the remote connection if the network fails; that is, collected data can no longer be sent to Bravura Security Fabric server. This is disabled by default. |
SMON STALE SESSION TIMEOUT | Mark sessions as stale if they have not contacted the server in this many seconds. The default is 120 seconds. |
Connectivity messages
The following settings affect messages displayed to users when certain events occur when session monitoring is initiated:
Option | Description |
---|---|
SMON NETWORK FAILURE TERMINATE MSG | Message to display to users when their connection is terminated due to a network failure. The message is controlled by the |
SMON NETWORK NO CONNECTION MSG | Message to display to users when the client cannot contact the Bravura Security Fabric server, and access is not granted. The message is controlled by the |
SMON TERMINATE BY ADMINISTRATOR MSG | Message to display to users when their connection is terminated by an administrator. The message is controlled by the |
Troubleshooting session monitor connectivity
If you have trouble connecting to the monitoring server when initiating a session, try using the process explorer program, procexp.exe, to analyze processes on the system. You can download this program from live.sysinternals.com.
If you have trouble connecting to the monitoring server when initiating a session, try using the logutil
program to collect logging information from the ActiveX controls. To do this, run the following command on the system where the ActiveX controls are being run from:
logutil.exe -instance "PPM Client ActiveX Controls" -level 6 -maxdelay 2 -makekey
Confirm the URL used in the connection. Most connection failures are the result of a misconfiguration in the URL, SSL, certificate validation, or proxy settings.
If the SMON HTTP URL is incorrect, the ActiveX controls will not be able to connect to the server, and as a result, will not allow the remote connection to the managed resource to proceed.
When a client using pswxcmd
or pswxtsvc
cannot communicate with the server via the SMON HTTP URL, the following message is displayed on the client:
"Failed to connect to Bravura Security Fabric server. Please contact the Bravura Security Fabric administrator."
Fix the URL so that it resolves for all client workstations. You can test it by copying and pasting the value into the web browser location field in the web browser. If a page loads with an encrypted blob then it worked (encrypted blobs start with {AES} ). Typical errors would be: server not found
, or 404 Page Not Found
.
The server not found
error means the first part of the SMON HTTP URL does not resolve correctly; the hostname or IP of the server is not accessible from client.
The 404 Page Not Found
error typically means that the wrong hostname or IP was used (it went to a web server other than the one with the Bravura Security Fabric instance installed). It could also hint that the virtual directory is incorrect, or that HTTP/HTTPS is incorrectly specified. The virtual directory is set during setup.
In order to download a session package, the client workstation must be able to resolve the URL of the server on which the package was created. If clients connect to the server using a load balancer, the client may not be able to download the package.
Alternatively, you can provide a separate, externally addressable name of the server.