---
title: OT/ICS Session Manager Connection
slug: kronpam-reference-guide-3-8-1/otics-session-manager-connection
docTags: 
createdAt: 2026-05-11T09:54:16.800Z
---

OT/ICS Session Manager sessions are typically established using an SSH tunnel. This creates a secure "pipe" from the operator's local machine to the Kron PAM server, which then forwards the traffic to the target device.

**Example Command:**

ssh -N -L \[Local\_Port]:\[Target\_IP]:\[Target\_Port] \[PAM\_User]@\[PAM\_IP] -p \[PAM\_SSH\_Port]

·         **Local Port:** The port on the user's machine used to access the application.

·         **Target IP/Port:** The destination address in the OT/IT environment.

·         **PAM Gateway:** The Kron PAM server acting as the proxy.

Once the tunnel is authenticated, the user connects their application to localhost:\[Local\_Port].