SSHΒΆ

This chapter contains an example of a basic FUDO configuration, to monitor SSH access to a remote server. In this scenario, the user connects to the remote server over the SSH protocol and logs in to the FUDO using an individual login and password combination (john_smith/john69). When establishing the connection with the remote server, FUDO substitutes the login and the password with the previously defined values: root/password (authorization modes are described in the User authorization modes section).

../../_images/quickstart_overview_ssh.png

Prerequisites

Description below assumes that the system has been already initiated. The initiation procedure is described in the System initiation topic.

Configuration

../../_images/data_modeling1.png

Adding a server

  1. Select Management > Servers.
  2. Click Add.
  1. Provide essential configuration parameters:
Parameter Value
Name test_server
Blocked fail
Protocol SSH
Anonymous fail
Ask for login reason fail
Description Test server
Permissions  
Granted users fail
Destination host  
Address 10.0.2.22
Port 22
Proxy  
Mode Proxy
Local address 10.0.8.64
Port 10050
  1. Click i to download the target server’s pulic key.
../../_images/quickstart_host_ssh.png
  1. Click i to generate the proxy server’s private key or i to upload the .PEM file private key definition.
../../_images/quickstart_proxy_ssh.png

Note

For security reasons the form displays server’s public key derived from the generated or uploaded private key.

  1. Click Save.

Adding a user

  1. Select Management > Users.
  2. Click Add.
  1. Provide essential user information:
Parameter Value
Login john_smith
Blocked fail
Account validity Indefinite
Role user
Preferred language English
Full name John Smith
Email john@smith.com
Organization fail
Phone fail
AD Domain fail
LDAP Base fail
Permissions  
Granted users fail
Connections  
Connections fail
Authentication  
Type Password
Password john11
Repeat password john11
  1. Click Save.

Adding a connection

  1. Select Management > Connections.
  2. Click Add.
  1. Provide connection details:
Parameter Value
Name wheel
Notifications ok
Users john_smith
Sessions recording Complete
OCR sessions fail
Delete session data after 10 days
Protocol functionality  
RDP Functionality default settings
SSH Functionality default settings
VNC Functionality default settings
Permissions  
Granted users fail
Servers  
Server telnet_server
Policy fail
Replace user ok root
Replace secret ok Replace with password
Password password
Repeat password password
  1. Click Save.

Establishing connection

At this point john_smith can connect to the target host over the SSH protocol.

Example:

../../_images/example_ssh_terminal.png

Note

Note that the fingerprint displayed when connecting to the target host for the first time is the same as was generated during server configuration.

After accepting the connection, user will be asked for the password. After successful authentication FUDO starts recording user’s activities.

Viewing user session

  1. Open a web browser and go to the 10.0.8.64 web address.
  2. Enter the login and password to login to the FUDO administration panel.
  1. Select Management > Sessions.
  2. Click Active.
  3. Find John Smith’s session and click i.
../../_images/ssh_ongoing.png

Related topics: