Transferring Files

How to quickly copy files into or out of remote sessions using drag and drop.

When you are within an secure, remote session you can copy files into the remote host and copy files out of the remote host using a simple drag and drop method.

The following describes the procedure for both Windows and Unix host sessions.

In a Windows Remote Sessions

To Copy Files in a Windows Remote Sessions:

1. Connect to a Windows remote session.
2. From your local client, select the file(s) that you wish to copy to the remote host and drag those files into the browser tab or window where the remote session is running. Folder copy is not currently supported.



3. Drop the file(s) anywhere within the remote Windows host desktop.

4. The file(s) will immediately begin copying to the Windows host and upon completion they will be stored in the Privileged Access Management virtual drive G.

   

5. From this virtual G: drive, you can copy and paste the file(s) where needed on the remote host.

   

Out of Windows Remote host

1. To copy files out of the Windows remote host, simply copy and paste the file (one at a time) from the remote host to the Download folder located in the Access Manager virtual drive G:.

2. Once the file has been copied to this Download folder, you will be prompted in your browser to download the file to your local computer.

3. Accept the browser download prompt and the file will immediately begin copying to your local client.

   

In a Unix Remote Sessions

To Copy Files in a Unix Remote Sessions:

1. Connect to a Unix remote session.
2. From your local client, select the file(s) that you wish to copy to the remote host and drag those files into the browser tab or window where the remote session is running. Folder copy is not currently supported.



3. Drop the file(s) anywhere within the remote Unix host session.

4. The file(s) will immediately begin copying to the Unix host and upon completion they will be stored in this user’s Unix Home directory.

   

5. From this Home directory, you can copy and paste the file(s) where needed on the remote host.

Out of the Unix remote host

1. To copy files out of the Unix remote host, select the Upload Tool option from the remote sessions Quick Menu located at the top of the session. This will deploy an PAM command utility to the user’s Unix Home directory.

   

    

2. Once the PAM utility is deployed, you can execute the copy by issuing this command:

   Copy

   1
   ./xtam -d filename  # Name of the file to copy from the Unix host to your local client

3. You will then be prompted by your browser to download the file. Accept the browser download prompt and the file(s) will immediately begin copying to your local client.

   

File Copy Session Events

All files copied into or out of remote sessions will be captured via the Session Event log.

Using an account with the appropriate permissions, you can view these events using the following procedure.

 

1. Navigate to the specific Record and click the Sessions tab. Note that Events can also be found in the Session Events report.
2. Active the Action menu associated to the Sessions and select the Events option.
3. Search, filter or sort by File Name of action (FileUpload indicates copying into and FileDownload indicates copying out of a session).

Disable Session

Disable Session File Browsing and Transfer.

If you want to disable the ability to browse or transfer files during in-browser remote sessions, then please configure the option described below.

1. Login to PAM as a System Administrator.
2. Navigate to Administration > Settings > Parameters > Session File Transfer.
3. Select the Disabled option from the dropdown menu.
4. Click the Save button next to this option.

Overwrite Session

Overwrite Session File Browsing and Transfer on an Individual Record.

You can overwrite the global Session File Transfer option described above, to allow or disallow file transfer on individual records. Please configure this overwrite mechanism as detailed next.

1. Login to PAM as a System Administrator.
2. Navigate to Administration > Record Types, locate the Record Type that is used for your Record where you want to overwrite the global configuration. Click this Record Type’s Edit button.
3. Within this Record Type’s Edit page, click the Add Field button. Create a new custom field using the following parameters:
   • Field Type: Choice
   • Name: FileTransfer
   • Display Name: File Transfer Control
   • Values: Use Global,Enabled,Disabled
4. Click Save to save your new field.
5. Back on the Record Type Edit page, once again click Save to save the changes made to your Record Type.
6. Now you can navigate to the Record itself that you want to enable this overwrite function, click the Record’s Edit button and select the appropriate choice. The choices are:
   • Use Global (or no selection): This record will use the globally defined Session File Transfer configuration.
   • Enabled: This record will allow/enable Session File Transfers regardless of the globally defined Session File Transfer configuration.
   • Disabled: This record will not allow/disable Session File Transfers regardless of the globally defined Session File Transfer configuration.
7. After you have made the selection, click the Save and Return button to save your record.
8. Now you can test your record configuration by connecting to a new session.