Listeners

Listener determines server connection mode (proxy, gateway, transparent, bastion) as well as its specifics.

../../_images/listeners_view.png

Adding a listener

Warning

Data model objects: safes, users, servers, accounts and listeners are replicated within the cluster and object instances must not be added on each node. In case the replication mechanism fails to copy objects to other nodes, contact technical support department.

Note

  • A proxy type listener can link to only one account to a server with the same protocol through different safes.
  • A bastion type listener cannot link to an anonymous account on a server with the same protocol as the listener’s protocol.
  • A listener cannot link to an anonymous and a regular or forward account to the same server with the same protocol as the listener’s protocol.
  • A listener cannot link to two regular or forward type accounts to the same server with the same protocol as the listener’s protocol, to which a single user has access.
  • For a given linked RDP listener and RDP server, both have to use either Standard RDP Security or TLS or NLA.
  1. Select Management > Listeners.
  2. Click Add.
  1. Define configuration parameters.
Parameter Description
General  
Name Object name.
Blocked Select if defined object should be unavailable after creation.
Protocol Server communication protocol.
HTTP timeout (HTTP only) Idle time after which the user will be required to authenticate again.
Enable SSLv2 support (HTTP only) SSL version 2 support.
Enable SSLv3 support (HTTP only) SSL version 3 support.
Security (RDP only) RDP connection’s security mode. Enhanced RDP Security (TLS) + NLA allows hiding Wheel Fudo PAM’s login screen upon connecting to destination host.
Announcement (RDP/VNC only) Local server announcement displayed on user login screen.
Permissions  
Granted users Users allowed to manage given object.
Connection  
Mode

Select connection mode to determine how the user will connect to target hosts.

  • Transparent - user connects to the target host by providing its actual IP address. Wheel Fudo PAM moderates the connection with the remote host using user’s IP address. This option requires deploying Wheel Fudo PAM in the bridge mode.
  • Proxy - user connects to the target host by providing Wheel Fudo PAM IP address and port number which unambiguously identifies target host.
  • Gateway - user connects to the target host by providing its actual IP address. Wheel Fudo PAM moderates the connection with the remote host using own IP address. This option requires deploying Wheel Fudo PAM in the bridge mode.
  • Bastion - user connects to the target host by including its name in the login string, e.g. ssh john_smith#mail_server@10.0.35.10.
Local address (applicable to bastion and proxy modes) An IP address and a port number used for connecting to the target host. A unique combination of those parameters allows for unambiguous identification of the target server. For more information on IP address assignment, refer to the Network settings topic.
Interface (applicable to gateway and transparent modes) Network interface used for communication with monitored servers.
Use HTTPS (HTTP only) Select this option to have connections to Wheel Fudo PAM encrypted with the SSL protocol.
HTTPS certificate Wheel Fudo PAM SSL certificate required for establishing secure HTTP connections.
HTTPS private key (HTTPS only) Wheel Fudo PAM SSL private key required for establishing secure HTTP connections.
TLS certificate (Enhanced Security RDP only) TLS certificate for RDP connections requiring Enhanced RDP Security.
Server public key (RDP only) Proxy server’s public key.
Listener public key

Upload or generate listener’s public key.

Note

Click the hash function specifier to switch between SHA1 and MD5 fingerprint representation.

../../_images/servers_fingerprint.png
  1. Click Save.

Modifying a listener

  1. Select Management > Listeners.
  1. Find and click desired listener to access its configuration parameters.
  2. Modify configuration values as needed.

Note

Unsaved changes are marked with an icon.

../../_images/unsaved_changes.png
  1. Click Save.

Blocking and unblocking a listener

Blocking a listener disables access for users using it to connect to servers.

Warning

Blocking a listener will terminate current connections with server which uses it.

  1. Select Management > Listeners.
  2. Find and select desired listener.
  3. Click Block to block access to given resource or Unblock to allow using given object to connect to selected servers.
  4. Provide descriptive reason for blocking given resource and click Confirm.

Deleting a server definition

Warning

Deleting a listener will terminate current connections with server which uses it.

  1. Select Management > Listeners.
  2. Find and select desired listener.
  3. Click Delete.
  4. Confirm deleting selected objects.

Related topics: