This section outlines the steps to leverage the advanced health checking capabilities for CyberArk PSM. This capability will use HTTPS to determine the health of the service rather than the default RDP health check in the template. This will require an addition Virtual Service to be set up for health checking purposes only on TCP/443.

Note: Steps to enable advanced health checking on the CyberArk PSM server can be found here: Deploy PSM Health Check.

Create a Dedicated Health Check Virtual Service

  1. In the main menu of the LoadMaster UI, go to Virtual Services > Add New.

  2. Type a valid Virtual Address.

  3. Enter Port 443.

  4. Provide a Service Name such as CyberArk PSM HealthCheck Virtual Service.

  5. Click Add this Virtual Service.

  6. Expand Real Servers.

  7. For URL, enter /psm/api/health and click Set URL.

  8. Tick the box for Use HTTP/1.1.

  9. For HTTP/1.1 Host, enter the Hostname of the PSM Servers and click Set Host.

  10. Set HTTP Method to GET.

  11. For Reply 200 Pattern, enter PASS and click Set Pattern.

  12. Click Add New.

  13. Type the Real Server Address.

  14. Click Add This Real Server.

  15. Repeat these steps to add more PSM Servers as needed.

Enable Enhanced Health Checking on the CyberArk PSM Virtual Service

  1. Click View/Modify Services in left navigation.

  2. Click Modify for the CyberArk PSM Virtual Services on port 3389.

  3. Expand Real Servers.

  4. Tick the box for Enhanced Options.

  5. Under the Healthcheck On column select the matching IP address for each real server for port 443.