---
title: Secure Remote Access
slug: kronpam-installation-guide/secure-remote-access
docTags: 
createdAt: 2025-01-13T10:55:15.265Z
---

This document outlines the steps for deploying **Kron PAM Secure Remote Access** functionality. This solution is VPNless, agentless, and SaaS-based, offering a modern approach to secure remote access while reducing compatibility issues and enhancing overall security.

By employing Kron PAM Secure Remote Access, administrators can configure 3rd party external users working hours, manage access, and ensure seamless integration with the Kron PAM Server. 3rd party external users authenticate using a unique URL and passcode, followed by their Kron PAM credentials, ensuring a multi-layered security approach. This architecture provides a modern, robust, and scalable solution for secure remote access, addressing security concerns and operational efficiency for privileged access management.

In order to employ Kron PAM Secure Remote Access, one of the two installation scenarios (with  the connector or without connector) can be applied, depending on the customer's choice: 

1\)    In the first installation scenario where the connector is used, two machines are set to operate **Remote Access Portal (RAP) **and** Secure Remote Access Connector** respectively. A secure HTTPS tunnel established between the **Remote Access Portal (RAP) **and** Secure Remote Access Connector** machines eliminates the need for traditional VPNs, enhancing security and reducing compatibility challenges along with ensuring the secure data transmission.

·         The **Remote Access Portal (RAP)** acts as a web-based portal for vendor access, enabling secure management of internal network devices during pre-defined working hours.

·         The **Secure Remote Access Connector** facilitates communication by creating outbound tunnels and exchanging public keys with the **Remote Access Portal (RAP)** machine.

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Z0oAjU7HwKusYUZXB1U5W_image.png "Secure Remote Access System With Connector Option")

2\)    In the second installation scenario where the connector is not used, only a machine is set to operate **Remote Access Portal (RAP).** A secure HTTPS tunnel established between the **Remote Access Portal (RAP)** and **Kron PAM server** machines eliminates the need for traditional VPNs, enhancing security and reducing compatibility challenges along with ensuring the secure data transmission.

·         The **Remote Access Portal (RAP)** acts as a web-based portal for vendor access, enabling secure management of internal network devices during pre-defined working hours.

·         The **Kron PAM server **facilitates communication by creating outbound tunnels and exchanging public keys with the **Remote Access Portal (RAP)** machine.

![](https://app.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/paCmZ45eHXq0_iNG38y3l_image.png "Secure Remote Access System Without Connector Option")