Fudo Enterprise 6.3 - API Documentation


Welcome!


The following are the enhancements and modifications introduced in version 6.3 of Fudo Enterprise.


File Transfer Scanning:

  • Antivirus Engines 🆕 - configure the ICAP antivirus engines that scan files transferred in HTTP sessions, and check their connectivity

  • File Transfers 🆕 - list the files uploaded and downloaded in sessions, with their size, digests and antivirus verdict

Sessions:

System Management:

Fudo Officer:

  • User Mobile Access (Fudo Officer) - administrators initiate Fudo Officer pairing for a user with POST /user/<user_id>/mobile/access; the new can_initiate attribute tells whether this is possible

  • Profile Authentication Methods Management - users complete the pairing in the User Access Gateway by generating the QR code for the mobile application, and unpair it themselves

User Access Gateway Enhancements:

  • UAG - Change Password - read the password complexity requirements that apply to the user before changing the password

Updates to Existing Object Specifications:

  • External Authentication: new tacacs type for TACACS+ servers, with tacacs_method, tacacs_append_domain and client certificate authentication (tls_client_certificate, tls_client_key, tls_client_key_passphrase)

  • Safe: block_concurrent_sessions, rdp_file_signing_enabled, file transfer in the RDP Web Client (rdp_webclient_file_upload_enabled, rdp_webclient_file_download_enabled, rdp_webclient_file_quota) and file_transfer_av_scanning

  • Session: malware_detected

  • Session Command: source tells shell commands captured in SSH sessions from commands controlled by the Fudo sudo plugin; started_at holds the time the user started typing the command

  • Reverse Proxy: webclient_rdp, webclient_ssh and webclient_vnc allow web client connections without a native listener

  • Reverse Proxy Listener: external_address and external_port shown to users in the User Access Gateway

  • Analysis Agent: provider_id can be changed on built-in agents; the read-only protocols attribute lists the session protocols the agent runs on, managed with the new agent protocol endpoints

  • External Storage: is_supported

  • Backup: sftp_serverkey is no longer protected

  • User Access Gateway identity: mobile_supported in the current user identity

  • User Access Gateway RDP configuration: .rdp files are signed with the certificate of the RDP listener; host and port are optional

Warning

The following changes to existing object specifications are not backwards compatible:

  • Safe: http_rendered_file_quota must be at least 1048576 (1 MiB). Smaller values are rejected.

  • User Access Gateway RDP configuration: server_id and listener_id are deprecated and ignored. The listener and the server are derived from the OTP.

You can search for Fudo Enterprise API features by using the search bar located on your left or refer to the table of contents below.



Table of Contents

Getting Started

Core Resources - Users & Groups

Core Resources - Accounts

Core Resources - Connection Assets

Access Requests

Password Management

Automation & Discovery

Sessions & Monitoring

Integrations - Authentication

Integrations - External Services

System Administration

User Access Gateway - Core

User Access Gateway - Sessions

User Access Gateway - Features

User Access Gateway - Vault

User Access Gateway - Settings