Basic Requirements for PAM360 Installation

This document provides guidelines for the recommended minimum hardware and software requirements to run PAM360 in your environment. You can use these baselines for your on-premises PAM360 installation. We have categorized the requirements based on the size of the organization where PAM360 is installed: Small, Medium, and Large.

Prerequisites
Hardware Requirements
Software Requirements
Ports Required by PAM360
Licensing

1. Prerequisites

Besides the standard system requirements (both hardware and software) listed in the upcoming sections, the following elements are essential for the proper functioning of the PAM360 server if you are planning to utilize PAM360’s account discovery and password reset provisions:

An external SMTP Mail Server to support the functioning of the PAM360 server and to send notifications to users.
A Service Account that either has Domain Admin Rights or Local Admin Rights in the PAM360 server and in the target systems you would like to manage.
Microsoft .NET framework.
Visual C++ Redistributable for Visual Studio 2015 and above (for PAM360’s Account Discovery and Password Reset features).

2. Hardware Requirements

Organization	Processor	RAM	Hard Disk
Small & Medium Businesses (<5,000 Privileged Accounts)	4 Cores or More	16 GB or More	4 GB for the Application 10 GB for the Database
Mid-Market Businesses (<20,000 Privileged Accounts)	8 Cores or More	16 GB or More	4 GB for the Application 10 GB for the Database
Enterprises (<50,000 Privileged Accounts)	16 Cores or More	24 GB or More	5 GB for the Application 50 GB for the Database
Large Enterprises (>50,000 Privileged Accounts)	24 Cores or More	32 GB or More	8 GB for the Application 100 GB for the Database

Additional Details

The disk space required for session recordings varies depending on the number, duration, and type of sessions recorded. The approximate storage consumed by session recordings (excluding idle time) is as follows:

Website/Remote Connection: 10 MB per minute of recording
Linux sessions: 0.5 MB per minute of recording
RDP sessions: 3 MB per minute of recording

Use these estimates to calculate the database requirements based on your organization's session recording usage.

Caution

If you have configured any High Availability model with an external database, the processor, RAM, and hard disk requirements for database remain the same as listed above for each environment size. However, for Application Scaling setups:

With 2 nodes, ensure each node has a Quad Core processor or above and 16 GB RAM.
With 4 nodes, ensure each node has an Octa Core processor or above and 32 GB RAM.

3. Software Requirements

Operating Systems	Web Interface and Database
Windows Windows Server 2025 Windows Server 2022 Windows Server 2019 Windows Server 2016 Linux Ubuntu 18.04 and above CentOS 6 and above Red Hat Linux 9.0 Red Hat Enterprise Linux 5.x and above AlmaLinux 9.x and above Note: In general, PAM360 goes well with any flavor of Linux and can also be run on VMs of the above operating systems.	Web Interface HTML client requires one of the following browsers to be installed in the system: Microsoft Edge for Windows Chrome, Firefox, and Safari for Windows, Linux and Mac PAM360 is optimized for 1280 x 800 resolution and above. Database Requirement PostgreSQL 14.17, bundled with the product. PAM360 also supports MS SQL Server 2016 and above. The SQL server should be installed in Windows Server 2016 and above.

Operating Systems

Web Interface and Database

Windows

Windows Server 2025
Windows Server 2022
Windows Server 2019
Windows Server 2016

Linux

Ubuntu 18.04 and above
CentOS 6 and above
Red Hat Linux 9.0
Red Hat Enterprise Linux 5.x and above
AlmaLinux 9.x and above

Note: In general, PAM360 goes well with any flavor of Linux and can also be run on VMs of the above operating systems.

Web Interface

HTML client requires one of the following browsers** to be installed in the system:

Microsoft Edge for Windows
Chrome, Firefox, and Safari for Windows, Linux and Mac

** PAM360 is optimized for 1280 x 800 resolution and above.

Database Requirement

PostgreSQL 14.17, bundled with the product.
PAM360 also supports MS SQL Server 2016 and above.
The SQL server should be installed in Windows Server 2016 and above.

4. Ports Required by PAM360

The below table lists the set of all ports used by PAM360 for various functions.

Port Name	Port Number	Protocol	Purpose	Source (Outbound)	Destination (Inbound)
Application Gateway	8288	TCP	For communication between the PAM360 Application Gateway server and the PAM360 server to execute password management operations	Application Gateway Server	PAM360 Server
Application Gateway	8289	TCP	For communication between the PAM360 Application Gateway server and the PAM360 server to facilitate remote sessions	Application Gateway Server	PAM360 Server
Web Client	8282	TCP	For PAM360 web application	User Machine	PAM360 Server
HTTPS Gateway Server	8285	TCP	For establishing HTTPS gateway connections to web-based resources through PAM360	User Machine	PAM360 Server
SMTP	25	TCP	For sending emails between mail servers	PAM360 Server	SMTP Server
SSH	22	TCP	For Unix and network device management	PAM360 Server	Target Resource
Telnet	23	TCP	For Unix and network device management	PAM360 Server	Target Resource
RDP	3389	TCP	For remote desktop connections to Windows devices	PAM360 Server	Target Resource
WMI, RPC	135, 139, 445	TCP	For managing Windows services and devices	PAM360 Server	Target Resource
LDAP, LDAPS	389, 636	TCP	For standard and secure directory communication and for managing LDAP passwords	PAM360 Server	LDAP / LDAPS Server
REST API	8282	TCP	For application interactions through RESTful services	User Machine	PAM360 Server
SSH API	6622	TCP	For secure shell API interactions	User Machine	PAM360 Server
Session Gateway	8283	TCP	For remote desktop and SSH sessions through the web client or mobile application	User Machine	PAM360 Server
PostgreSQL	3456	TCP	For communication between the PAM360 service and the bundled PostgreSQL database and for database replication between the primary and read-only servers	PAM360 Server	PAM360 Server
PostgreSQL	5432	TCP	To rotate passwords and launch secure remote connections to the managed PostgreSQL databases	PAM360 Server	PosgreSQL Server
MS SQL	1433	TCP	To rotate passwords and launch secure remote connections to the managed MS SQL databases	PAM360 Server	MS SQL Server
Private CA-OCSP Respoder Server port	8080	TCP	OCSP responder endpoint for certificate status checking	Website	PAM360 Server
Oracle	1521	TCP	To rotate passwords and launch secure remote connections to the managed Oracle databases	PAM360 Server	Oracle Database Server
Sybase ASE	5000	TCP	To rotate passwords and launch secure remote connections to the managed Sybase ASE databases	PAM360 Server	Sybase ASE Server

5. Licensing

Trial Version: Instantly download and install the fully functional trial version, supporting up to 5 administrators. Evaluate all features for 30 days.
Free Version: After 30 days of trial, the trial version will be automatically converted to free version. This perpetual free version allows for 1 administrator and management of up to 10 resources, with no expiration.
Registered Version: This version is licensed based on the number of administrators and keys, and offers advanced capabilities such as automated discovery of privileged accounts, integration with ticketing and SIEM systems, jump server configuration, application-to-application password management, built-in compliance reports, and support for SQL Server or clustered databases as the backend.

PAM360 supports seven distinct user roles:

Privileged Administrator
Administrator
Cloud Administrator
Password Administrator
Password Auditor
Password User
Connection User

The term administrator in the registered version encompasses Privileged Administrators, Administrators, Cloud Administrator, and Password Administrators. Licensing restricts the total number of these administrators. However, there is no limitation on the number of Password Users and Password Auditors. For more details on PAM360 user roles, click here.

Top