Access Manager is Self-Hosted or Cloud Datacenter Gateway

Xton Access Manager (XTAM) is a self hosted Jump server also called “Bastion Host”, “Remote Gateway” or “Jump host”. XTAM is a solution to access Windows or Unix servers, network devices or Cloud (AWS or Azure) containers from inside or outside of the corporate network.

Additionally, XTAM features 2 factor authentication, SAML Authentication, SSH, RDP, VNC and Telnet session recording, Identity and Access management (IAM), role based access, Privileged Access management (PAM), SSH key rotation, root password management, and much more. XTAM will help you meet security compliances such as PCI, NIST, ISO 27001.

Use of an access gateway to login to servers in a corporate datacenter follows the advice of “Gartner’s Top 10 Security Projects for CISO to focus” that “At a minimum, CISOs should institute mandatory multi-factor authentication (MFA) for all administrators. It is also recommended that CISOs use MFA for third-party access, such as contractors.”

In addition to this, XTAM access gateway brings several other security advantages over the direct login to network servers.

Reasons to use RDP, SSH, VNC, HTTP and Telnet gateway

Isolate critical infrastructure, enforce Multi-Factor Authentication (MFA) and approval workflow when using SSH, RDP, VNC, HTTPS or Telnet.

Provide role-based access controls (RBAC) using existing identity managers such as Active Directory, ADFS, Azure AD, Okta, Forticode Cipherise, or any SAML solution.

Secure remote server access to the local or cloud datacenter from the outside of the corporate network

Support administrative multi-tier model of critical infrastructure access (Red Forest) with restrictions and security zones

Log and record sessions and session activity for full auditability, including metadata and user identities, across the entire infrastructure – from legacy bare-metal machines to modern elastic clusters.

Manage passwords, keys, VPNs, firewalls, jump boxes, or IPs using modern interactive WEB GUI.

Monitor, share or terminate sessions in real-time.