---
title: "System parameters - Remote Session"
slug: "pam-session-proxy-settings"
updated: 2026-11-09T12:29:48Z
published: 2026-11-09T12:29:48Z
canonical: "docs.senhasegura.io/pam-session-proxy-settings"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# System parameters - Remote Session

This document provides information about the **System parameters** form screen, which refers to the parametrization of proxy sessions, on the **Remote session** tab.

Attention

Some features in older versions of Segura™ Platform are no longer present in this documentation. We suggest that you avoid changing parameters that aren’t in this document.

## Path to access

1. On Segura™ Platform, in the navigation bar, hover over the **Products menu** and select **Settings**.
2. In the side menu, select **System parameters > Global > Remote session**.

Attention

All fields are set with a default value, as recommended by Segura™ Platform. However, you can customize your session according to your needs.

---

## Remote session tab

### General section

Alert

The **Enable file transfer** parameter underwent a **beta** update and was divided into two parameters: **Enable file transfer for download** and **Enable file transfer for upload**. Currently, If you select **Yes** for either of these parameters, both download and upload functions will be **enabled**. To completely **deactivate** file transfer, select **No** for **both** parameters.

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Enable livestream in real time?*** | Radio button | Yes | Enables livestream monitoring of the proxy session. Default option: **Yes**. |
| **Enable RemoteApp in session?*** | Radio button | Yes | Enables recording session that uses **RemoteApp**. Default option: **Yes**. |
| **Enable Ad Hoc access on Web, RDP and Terminal Proxy?*** | Radio button | Yes | Enables Ad Hoc sessions, which connect to devices not registered in Segura™, on Web Proxy, RDP Proxy, and Terminal Proxy. It applies only to Proxy 2.0. When set to **No**, no Ad Hoc entry point is displayed and the proxies refuse Ad Hoc sessions. Sessions already in progress are not ended. Each change is recorded in the audit trail with the author and the previous and new values. Default option: **No**. For more information, see [Ad Hoc access](/v4-2/docs/pam-session-about-ad-hoc-access). |
| **Number of simultaneous user sessions (zero indicates unlimited)*** | Quantity input | Yes | Indicates how many simultaneous proxy sessions a user can run. It can range from **0** to **99**. Default option: **0 (unlimited)**. |
| **Enable file transfer for download?*** | Radio button | Yes | Enables file transfers between the target device and source workstation. Default option: **Yes**. |
| **Enable file transfer for upload?*** | Radio button | Yes | Enables file transfers between the source workstation and the target device. Default option: **Yes**. |
| **Enable copy and paste?*** | Radio button | Yes | Enables the permission to copy and paste from the clipboard to the target device and vice versa. Default option: **Yes**. |
| **Enable use of personal credentials?*** | Radio button | Yes | Enables the user to start remote sessions using personal credentials. Default option: **No**. |
| **Enable triggers for file transfers?*** | Radio button | Yes | Enables the permission to have an evaluation by external plugins in file transfer. The demand for these plugins should be forwarded to our Commercial team. Default option: **No**. |
| **Enable download for local access?*** | Radio button | Yes | Enables the RDP file extension or the BAT file running PuTTY1 to be generated by Segura™ Platform and downloaded by user operators, facilitating access to a credential. Default option: **No**. |
| **Users can change PuTTY installation directory?*** | Radio button | Yes | When enabled, user operators can change the binary location directory when downloading. They choose a new location from the user preferences menu. Default option: **No**. |
| **Enable support for SSH domain credentials?** | Radio button | Yes | Enables access permission with domain credentials for SSH connections. Default option: **No**. |
| **Mask for connection string when using SSH domain credentials** | Text field | Yes | After **Enable support for SSH domain credentials?** is enabled, the text box will be available to insert the string mask related to the connection. This field must be filled in with the values user, domain, and separator. Example: `user@domain` or `domain\user`. |
| **Segura server IPv6 interface*** | Text field | Yes | Segura™ Server IPv6 network interface name. Default option: **eth0**. |
| **PuTTY installation path*** | Text field | Yes | The path where the **PuTTY** binary will be found in operators' workstations. |
| **Keyboard Layout*** | Dropdown menu | Yes | Indicates which keyboard layout will be used during the session. Choose among one of the **21** available options. |
| **Session text language (OCR)*** | Dropdown menu | Yes | Indicates which language will be used during the session. Choose among one of the **15** available options. |
| **Connection banner** | Text field | No | A message that will be presented to users when starting a proxy session. |

### Web Proxy section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Convert /r/n to /n on SSH sessions when using the browser?*** | Radio button | Yes | Enables the standard Microsoft® Windows end-of-line characters (\r\n) to be replaced by Unix format (\r) when copying and pasting text in Segura™ Platform Web Proxy sessions with SSH protocol. Default option: **No**. |
| **Color depth** | Dropdown menu | No | Sets the color depth, between **8** and **32** bits, for VNC HTTP sessions, according to the desired performance. Default option: **16 bits**. |
| **Web proxy browser** | Dropdown menu | No | Indicates the default browser with which Web Proxy sessions will be initiated. Default option: **Mozilla Firefox**. |

### Terminal Proxy section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Enable SUDO automation in Linux sessions?*** | Radio button | Yes | Enables the use of the `SUDO` command by the user to automate the process of privilege elevation Default option: **Yes**. |
| **SSH terminal type*** | Radio button | Yes | Indicates the terminal type that will be used in SSH and Telnet sessions Default option: **Linux**. |

### RDP Proxy section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Ignore certificate errors?*** | Radio button | Yes | Indicates whether invalid certificates on RDP connections should be ignored. Default option: **Yes**. |
| **RDP drive letter*** | Dropdown menu | Yes | A letter that represents the created remote disk unit. Users can choose between the **D** and **Z** letters range. Default option: **G**. |
| **Enable Ctrl+Alt+Del?*** | Radio button | Yes | Gives the operator user access to the device's advanced controls in graphical RDP sessions by using the `Ctrl + Alt + Del` key combination. Default option: **Yes**. |
| **Enable RAIL over RDP?*** | Radio button | Yes | Enable the **Rails over RDP** Microsoft® technology. If enabled, the RemoteApp connection will improve the usability. Default option: **No**. |
| **Enable wallpaper in RDP sessions?*** | Radio button | Yes | Enables the RDP session wallpaper to be presented during the session. Default option: **No**. |
| **Include hostname in local login in RDP sessions?*** | Radio button | Yes | The system includes the machine’s hostname to log in. Default option: **No**. |

### Recording section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Enable user input recording?*** | Radio button | Yes | This attribute, unlike the text indexing settings, indicates whether the entries will be recorded separately in the session and will not be visible in the report that aggregates all the texts from all the sessions. Default option: **Yes**. |
| **Enable session video recording?*** | Radio button | Yes | Enables the session video to be recorded. This video is an optimized binary copy of the protocol that has been carried over. Make sure to distinguish the exported MP4 file. Default option: **Yes**. |
| **Enable session purge?*** | Radio button | Yes | Enables the platform to automatically discard videos of sessions that have reached a specific expiration date. Default option: **No**. |
| **Days for purge*** | Quantity input | Yes | Indicates how many days the video should be stored. It can range from **0** to **1000** days. Default option: **90 days**. |
| **Web session image quality*** | Quantity input | Yes | Indicates the quality level of the image for web sessions. It can range from **10** to **100**. Default option: **100**. |
| **Number of video frames (fps)*** | Quantity input | Yes | Indicates the frame video amount and sets the fps for video record in sessions. It can range from **2** to **24** fps. Default option: **15 fps**. |
| **Web session image type*** | Radio button | Yes | Indicates the image type in the web session. Choose between **PNG** or **JPEG**. Default option: **PNG**. |
| **Enable the download of the session video?*** | Radio button | Yes | Only users with the proper permissions can request the video session download if this parameter is enabled. Default option: **No**. |

### Temporary token section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Maximum temporary token duration (hours)*** | Text field | Yes | Defines the maximum duration users can choose when they generate a temporary token for proxy access. Enter a whole number from **1** to **24**. Default option: **8**. |

Attention

A value greater than **8** hours requires explicit risk acceptance.

When you save a value greater than **8** hours, the **Attention** dialog shows the new maximum duration. Select **I am aware of the risk and want to continue** and click **Confirm**. If you click **Cancel**, the previous value is kept.

If you lower the maximum duration, the proxy refuses tokens generated with a longer duration at their next login. Sessions that are already open are not affected.

The audit trail records each change to this parameter: the administrator, the previous and new values, the date, and the risk acceptance.

To learn how users generate the token, see [How to generate a temporary token for proxy access](/v4-2/docs/pam-sessionmanagement-how-to-generate-a-temporary-token-for-proxy-access).