The SSH Proxy Session Manager manages SSH connections. An SSH Proxy can be categorized based on how it connects to the target system by using the credentials. TELNET is also supported by the SSH Proxy. 

Kron PAM SSH Proxy enables users to access target systems over the SSH protocol through the Kron PAM proxy without requiring a VPN connection between the user's workstation and the target system.

SSH Proxy logs and monitors SSH sessions and features device management and policy management rules. 

Kron PAM SSH Proxy operates in agentless mode. Session recording, monitoring, and management are performed through the proxy without requiring any agent or software to be installed on the target SSH server.

The SSH Proxy Session Manager is a powerful tool that effectively manages SSH connections and offers support for TELNET. With the added feature of Kron PAM SSH Proxy, it enhances your sessions by providing comprehensive logging and monitoring capabilities

SSH Proxy Connections

SSH Sessions Duration-Based Limitation Settings

SSH Proxy Connection Interfaces

SSH Proxy Encryption and Key Exchange Algorithms

Running Scripts at The Beginning of an SSH Session

Switch User Script Feature

Reason Field in SSH Connections

Session Log Control in SSH Proxy

Kron SSH (Kssh)

Web GUI SSH Session Settings

SSH Session Number Limitation for  a User

Cluster Device Command Check

SSH Proxy Legal Disclaimer Message

SSH Proxy

RDP Proxy Connections

RDP Session Settings

RDP Connection Interfaces

RDP Connections Reason Field

VNC Device Properties

OCR Language Settings

OCR Sensitivity Settings

Temporarily Disabling RDP Keylogging

Supported Key Mappings

RDP Proxy Legal Disclaimer Message

Transferring Files between RDP endpoints

Enabling Simultaneous Sessions Warning for RDP Connections

RDP Proxy Session Log Control 

Session Number Limitation a User Can Have on RDP

RDP Proxy

HTTP Proxy Configuration

Authenticating to HTTP Proxy

Web Portal Access

Containerization of Web Browser

HTTP Proxy SSL/TLS Mode

Auto-Login for Kron PAM HTTP Proxy

Importing Unknown Domains as Bypass Domains

HTTP Proxy Assigned Credential Support

HTTP Proxy Logging Headers

Allow HTTP Proxy Access to SubDomains

HTTP Proxy Websocket Frame Length

Connector - HTTP Proxy Support

HTTP Proxy Logging

HTTP Proxy Certificate Settings

Obsolete Line Folding

Managerial Approval for User Connections to HTTP/HTTPS Devices

Connection Reservation Usage on HTTP Proxy Auto-Login Feature

HTTP Proxy

Authorization via Geolocation

IP Authorization

Double Confirmation

Advanced Authorization Methods

Kron PAM Configuration for Connection of ML-Based Threat Analytics and Response Engine

Kron PAM Configuration for Threat Threshold Incident Response

Anomaly Options Menu

Detected Risk Scores

Anomaly Feedback

Threat Analytics and Response Engine Configuration

User and Entity Behavior Analytics

OT/ICS Session Manager Configuration

OT/ICS Session Manager Connection

Monitoring and Auditing OT/ICS Sessions

OT/ICS Session Manager

SFTP Proxy Connections

SFTP Proxy Assigned Credential & User Session Usage

SFTP Proxy Assigned Credential within Specific Time Period

SFTP Proxy Connection Interfaces

SFTP Proxy Timeout Settings

SFTP Proxy Encryption and Key Exchange Algorithms

Encryption of Stored Files in SFTP Proxy 

Session Number Limitation of a User on SFTP

SFTP Proxy

Session Manager

Manual Log-In Connections

Global Username/Password Connection

Session User (LDAP/AD User) Connection

Multiple User Selection in SSH Proxy

Generate SSH Key with SSH-Keygen Tool

Uploading Public Component of Key Pair to Target SSH Device

Adding Private Key as a Global SSH Key

Generate SSH Key with PuTTY

Global SSH Key Connections

SSH Passphrase Connections

Assigning Kron PAM Credentials to Target System Accounts

Managerial Approval for SSH Proxy Connections

Connecting to Target Device with IP address for SSH Proxy

Idle Session Timeout

3.8.1 Kron PAM Web GUI

License Manager

Email Server Configuration

Language Settings

Menu Lists Management

System Configuration Parameters

Enabling Push Notifications for Kron PAM Mobile Client Application

Enabling HTTPS on the Kron PAM Web GUI

Backup Management

Log Management

SAML Authentication

Hardware Security Module (HSM) Integration

Windows Authentication on the Kron PAM GUI

PKI Authentication

SMS Configuration

Logo and Background Customization

Multitenancy

Kron PAM Administration

Manual User Creation

Kron PAM Users Search

User Actions Menu

Editing Kron PAM Users

Editing User Properties

Temporary User

Local User Bulk Import

New User Request

Force New User to Change Password 

User Password Strength Settings 

User Password Hash Algorithm Settings

Notifying Inactive Users Before Lock

LDAP/Active Directory Integration

Microsoft Entra ID Integration

User Group Creation

Assigned Credentials

SSH Keys Manager

User Management

Element Type

Device Groups

Device Inventory

Device Management

Policy Key Creation

Policy Groups Creation

Device Realm Creation

Policy Tracking

Policy Management

Managerial Approval for Connections 

Managerial Approval Connection Reservation

Managerial Policy Reservation

Managerial Approval for Commands

Managerial Approval in Shared Account Password Manager (Vault)

Approval Workflow

Approval Workflow SMS Settings

Approval Management

Password Vault

Application Token

Audit

Vault Agent

Secrets

Sending the MFA QR Code to Users

Creating a Connection Between Kron PAM and the Kron PAM Mobile Client Application

Enabling Multi-Factor Authentication (MFA)

Using MFA to Log in to the Kron PAM Web GUI

Using MFA to Log in to the Kron PAM Desktop Client

Using MFA for SSH Connections

Using MFA for RDP Connections

Using MFA for SSH Proxy

Using MFA for HTTP Proxy

Using MFA for SFTP Proxy

Using MFA for TACACS+ Manager

Using MFA for Radius

Using MFA for Kron PAM Mobile Client Application

Using MFA for Remote Privileged Access Management

Offline Mode Settings

Using SMS for MFA

Using E-mail for MFA

User Token Management

Using Hardware Tokens for MFA

Using Authentication Key (FIDO Key) for MFA

Using Keystroke for User Behavior Analytics

MFA Configurations for VPN Services

External MFA Providers

Multi-Factor Authentication

Basic Configurations for Unified Access Management

MSCHAPv2 RADIUS Configuration

TACACS+ Management Configuration Page 

Unified Access Manager

SQL Proxy

Database Session Logs and Activity Views

Kron DAM with Azure SQL Database

Database Alarm

Single Sign-On (SSO)

Add Vault Account

Connection Reservation & Command Approval

Denial-of-Service (DoS) Protection

Buffer Overflow Attack Protection

DAM Object Explorer

Sensitive Data Discovery

Reports

Permit Zone

Database Discovery

APPENDIX 1: System Config Manager Parameters

APPENDIX 2: SQL Proxy Application Properties

Data Access Manager

Importing Devices from Amazon Web Services

Importing Devices from Microsoft Azure

Importing Devices from the Google Cloud Platform

Cloud PAM

CSP Account Definition

Enabling CIEM Service

Cloud Infrastructure Entitlement Management (CIEM)

Reference Guide