Fudo Enterprise 6.0 Documentation [BETA]¶
Welcome!
The following are the enhancements and modifications introduced in version 6.0 of Fudo Enterprise. Remember to update to the latest available version to benefit from all improvements.
Note
The structure of this documentation has been adjusted to reflect the updated GUI layout and menu arrangement, making it easier to navigate and find relevant information.
Version 6.0 (Latest)
Introduced Password Vault, a new module that extends Fudo Enterprise with centralized secret storage and credential lifecycle management.
Supports secure storage of passwords, SSH keys, API keys, certificates, and secure notes.
Organizes secrets in a hierarchical collection structure for easier management across teams and environments.
Provides RBAC-based access control to collections, allowing precise delegation of management permissions.
Offers a dedicated view of secret-related activity to improve auditability and support security investigations.
Integrates with Password Changers to enable automated password rotation for stored secrets.
Introduced a modular licensing model for Privileged Session Management and Password Vault.
Introduced Reverse Proxy, enabling secure SSH reverse tunneling to publish internal services without exposing the infrastructure to inbound connections.
Added German and Uzbek as new user interface languages.
Complete UI refresh - The entire Fudo interface has been redesigned with a modern, clean aesthetic featuring updated typography, refined color scheme, simplified navigation structure, and enhanced visual hierarchy for better usability and professional appearance.
Redesigned data tables interface - All tables throughout the product have been modernized with improved filtering, sorting capabilities, column visibility management, and cleaner visual presentation for enhanced user experience.
Added CHAP and MS-CHAPv2 as a new authentication method option for RADIUS external authentication, providing enhanced security and compatibility with Microsoft Active Directory environments.
Added support for the PostgreSQL protocol, enabling the creation of dedicated PostgreSQL servers and listeners.
Added TLS support for VNC.
Added support for connecting to target servers through reverse SSH tunnels.
Added support for anonymous accounts in sessions established through SSH tunnels, while preserving session attribution to the user who created the tunnel.
Added support for a custom hostname in RDP sessions. The new RDP Config Domain field in the RDP listener configuration defines the hostname shown in the RDP client title bar.
Added visibility into the source of each session. The new Access channel column in the Sessions tab shows which product or client was used to establish the connection.
Added fullscreen mode support to the Webclient for a more convenient session view.
The Webclient clipboard now allows sensitive content to be hidden using the eye icon, so copied values such as passwords do not have to be displayed in clear text.
Added a delay after authentication failures to help prevent brute-force attacks.
Upgraded the operating system base to FreeBSD 14.3.
Updated the Angular framework used by the web interface to version 21, the current stable release.
Performed additional maintenance updates to frontend dependencies.
Updated the FreeTDS library to support newer TDS protocol versions.
ShareAccess improvements:
Improved organization owner reassignment in ShareAccess by limiting the selection to users eligible to become the new owner.
Added file upload support to the ShareAccess Webclient for RDP sessions.
Notifications in the ShareAccess GUI now include resource names for improved clarity.
Fudo Officer mobile app improvements:
Added support for additional push notification types, including session start, session end, and policy alert notifications.
Added support for Password Vault access requests in the mobile app.
Added the ability to configure which Fudo Enterprise notification types are sent as push notifications to Fudo Officer.
Added a notification history view with detailed notification screens.
Added unread counters for access requests and notifications in the profile switch view.
Improved connection error handling in the mobile app.
Improved the User Report and User Access Report by excluding anonymous entries that are not relevant to the purpose of these reports.
Improved performance when adding new entries to large routing tables.
Improved performance when loading large access account lists in UAG.
Restored the ability to change the order of user authentication methods in LDAP synchronization settings.
Table of Contents¶
- About Documentation
- Layout Themes of the Admin Panel
- Introduction
- System Deployment
- Quick Start
- Sessions
- Filtering Sessions
- Viewing Sessions
- Pausing Connection
- Terminating Connection
- Joining Live Session
- Sharing Sessions
- Commenting Sessions
- Sessions’ Retention Lockdown
- Exporting Sessions
- Deleting Sessions
- OCR Processing Sessions
- Session Data Replication
- Session Timestamping
- Require Approval for Access
- AI Behavioral Analysis in Sessions
- Ai Session Summary [BETA]
- Access Requests
- Reports
- User Management
- Session Management
- Servers
- Creating a Server
- Creating an HTTP Server
- Creating a Modbus Server
- Creating a MS SQL Server
- Creating a MySQL Server
- Creating a PostgreSQL Server
- Creating an RDP Server
- Creating an SSH Server
- Creating a Telnet Server
- Creating a Telnet 3270 Server
- Creating a Telnet 5250 Server
- Creating a VNC Server
- Creating a TCP Server
- Port Ranges in Server Configuration
- Importing a Server List from CSV File
- Editing a Server
- Blocking a Server
- Unblocking a Server
- Deleting a Server
- Creating a Server
- Pools
- Accounts
- Listeners
- Creating a Listener
- Setting up the SSH Listener
- Setting up the RDP Listener
- Setting up the VNC Listener
- Setting up the HTTP Listener
- Setting up the Modbus Listener
- Setting up the MySQL Listener
- Setting up the PostgreSQL Listener
- Setting up the TCP Listener
- Setting up the MS SQL Listener
- Setting up the Telnet Listener
- Setting up the Telnet 3270 Listener
- Setting up the Telnet 5250 Listener
- Editing a Listener
- Blocking a Listener
- Unblocking a Listener
- Deleting a Listener
- Creating a Listener
- Safes
- Discovery
- Remote Applications
- Policies
- Downloads
- Productivity
- Servers
- Password Vault
- Settings
- System
- Network Settings
- Notifications
- Artificial Intelligence (AI)
- Authentication
- External Passwords Repositories
- External Storage
- Resources
- Backup and Retention
- Cluster Configuration
- Users Synchronization - User Directory
- Certificate-based Authentication Scheme
- Login Timeout
- System Version Restore
- System Reboot
- Changing Encryption Passphrase
- Integration with CERB Server
- System Maintenance
- Events Log
- Account Activity in the User Access Gateway (UAG)
- Reference Information
- Fudo Officer 2.3
- Fudo ShareAccess
- Client Applications
- Troubleshooting
- Use Cases
- Two-Factor OATH Authentication with Google Authenticator
- OpenID Connect Authentication Definition with Microsoft Entra (Azure)
- Remote Desktop Services Configuration on Windows Server for Fudo Enterprise
- Managing RDP Server Certificates in Windows Server
- Configuring the Single Sign On (SSO)
- Handling Local Account Password Changes Using a Domain Account with WinRM Password Changer
- Configuring Kerberos Constrained Delegation for MSSQL(TDS) Server
- Establishing Connections to Servers via SSH Tunnel in Fudo Enterprise
- Frequently Asked Questions
- Glossary