Executive Overview
Privileged accounts (Domain Admins, Root users, Cloud Global Admins, Database Superusers) represent the highest-risk attack surface in enterprise IT infrastructure.
ManageEngine PAM360 is an enterprise-grade Privileged Access Management (PAM) solution combining credential vaulting, SSH key management, remote jump server proxying, session recording, and Just-In-Time (JIT) elevation.
This blueprint details the High Availability (HA) Cluster Deployment Architecture for PAM360.
---
Architectural Topology
The PAM360 High Availability deployment consists of:
- Primary PAM360 Server (Active)
- Secondary PAM360 Server (Passive Standby)
- Embedded PostgreSQL Cluster with First-Failure Automated Sync
- PAM360 Gateway Server (DMZ Jump Server for Isolated RDP/SSH Proxying)
- SIEM / Splunk / Sentinel Connector for Real-Time Syslog Auditing
---
Prerequisites & System Requirements
- OS: Windows Server 2025 / 2022 or Red Hat Enterprise Linux 9.x
- CPU/RAM: 8 VCPU, 32GB RAM per cluster node
- Database: Bundled PostgreSQL 14+ with TLS 1.3 encryption
- SSL Certificates: SAN Certificate signed by Enterprise Root CA
---
Configuration Steps
1. Enable High Availability Synchronization
On the Primary Node, configure ha_config.conf:
# PAM360 HA Configuration
ha.mode=active-passive
ha.primary.ip=10.100.4.15
ha.secondary.ip=10.100.4.16
ha.db.replication.port=5433
ha.heartbeat.interval=5000
2. Configure RDP & SSH Jump Gateway Proxy
Route all remote administrative connections through the HTML5 web gateway to prevent direct network connectivity from admin laptops to server subnets.
> Result: Complete compliance with PCI-DSS 4.0, ISO 27001, and NIST SP 800-53 privileged access security frameworks.