Pragma Fortress SSH Server is a full-featured ssh server with these highlights:

FIPS Compliant

Pragma Systems is the ONLY SSH Server available today that holds it's own FIPS 140-2 certificate (# 1500) for Windows Server 2003 and Windows Server 2008 as issued by the CMVP (Cryptographic Module Validation Program).

SSH1 Support

Legacy support for the older ssh1 protocol.

Protocol Restriction

Restrict access to the server based on the protocol in use. Users can be granted only shell, sftp, and/or access. A protocol can be denied completely or only granted for certain users and/or groups.

TCP/IP Port Forwarding

Run insecure protocols like SMTP, POP, TELNET etc to run over a secure ssh session. See Port Forwarding for more details.

RSA\DSA Cryptography

Uses proven reliable RSA\DSA cryptography. User can generate keys independent of client/server connection.

Data Compression

User can choose between nine levels of data compression.

Multiple Encryption Ciphers

DES, 3DES, Blowfish, CAST-128, Arcfour and new AES (Rijndael) encryption is supported. See Cipher for more details.

Secure File Transfer

Pragma Fortress SSH Server environment includes secure file transfer capabilities. Two standards are defined for file transfers: SCP and SFTP. Scp is both a file copying server and client and uses ssh-sshd secure tunnel under the hood to securely copy files between systems. A sftp client program works similar to ftp client user interface and uploads or downloads files and directories from an sftp-server. SFTP also uses under the hood ssh client on the client side and sshd server on the server side to create the secure tunnel over which all data transfer and commands travel. Standard FTP can be piped through a SSH tunnel using the port forwarding feature. Pragma's Fortress SSH Server package supports all of these file transfer features.

Advanced Console Support

Allows history scroll back with the ability to run console application. Advanced Console screen mode is a combination of Pragma's unique Stream mode and Full Console support.

Application Wrap

Application Wrap enables character or console based programs that have difficulty running in a telnet or ssh session to run on Windows.

Active-Directory Support

Microsoft Windows Active-Directory support, including native mode.

Session Reconnect

Reconnect to an orphaned session matched by username and client IP address.

Printing Support

Pragma Fortress SSH Server supports printing across a ssh session to a printer connected to the client. Very useful for point-of-sale (POS) systems. The user prints with their application and the job will be sent back to the client and can then be routed to the local printer or any other printer accessible by the client application.

Automatic System Beep Pass Through 

Any system beep run inside a Pragma Fortress SSH Server session will automatically pass to the client, causing the client to beep.

Multiple Authentication Methods

A session can be authenticated in one of 3 ways

Password.

Certificate/Key - including X.509 support

GSSAPI/Kerberos - including NTLM

Network Drive Cleanup

When a user ends the session, Pragma Fortress SSH Server will automatically disconnect any network drives that were connected during the session.

Configuration Management

Server administrators can be limited to a explicit list of users, not simply system Administrators. These administrators can be added easily using the Local Server Configuration tool.

Configuration Import/Export

Settings can be saved to a file, either a binary registry export or XML file. These can then be loaded onto other systems or used as a backup.

Enterprise Configuration Push

Multiple configurations can be loaded to a central server, then pushed to multiple servers on the network.

User Access Management and Configuration

Most of the session configurations can be specified on a per-user basis. As a possible security option, only configured users can be given access to the server.

Group Access Management and Configuration

Specify that only users of specific Windows groups be allowed access. Session configuration can be assigned based on the group.

IP Address Filtering

Deny or Grant access to any configured InetD service by the client IP Address.

IP Configuration

Most of the session configurations can be specified on a per-IP basis.

Session Monitoring

Open a console window on the server for each session so that an administrator can actually see what is going on within the session.

Graceful Termination of Applications

Close processes left on the server when a session closes in without closing the applications running in the session. An exit sequence will be passed to monitored child processes, closing the applications in a graceful manner, allowing them to do any cleanup or save data.

Service Logon

Allow child processes of the Pragma InetD service to be run as a user other than LocalSystem.

User Defined Command Shell

Customizable login-shell allowing UNIX-like shell or custom applications to be run when a client logs on.

User Defined Login Script

A shell initializing program and/or login script can be run to setup the environment.

User Environment Variables

Specify environment variables to be used within a session without interfering with system variables.

Console Subsystem Support

Sessions are integrated with a full console subsystem to provide users with easy command shell features, with up-arrow for last command, command editing, and function key support. This makes the remote session behave the same as a local session.

Console Application Support

A full console is available within a session allowing any console mode or text-mode program that can be run on Windows to run within the session, including 16-bit DOS applications. Examples are EDIT, VI, EMACS, DEBUG, TREE, DIR, NETSTAT, NET, COMPILER, LINKER, FTP, and LYNX.

Multi-user support

Multiple users can log in simultaneously.

Session Limit per User

The number of sessions for a single user can be limited.

Dynamic Character Mapping

Pragma Fortress SSH Server supports user defined character maps. This will improve the look of any session from any client, by assigning a new value to a character that is represented undesirably. See Dynamic Character Mapping for more information.

Session Logging

Pragma Fortress SSH Server supports logging user input to a file. A text or HTML format file can be saved, to be viewed at another time. This will track user logon, logoff and all typing done by remote user. See Logging Options for more information.

Server Operation Logging

A troubleshooting feature is available that will log operations as they are performed within the session. This is an advanced feature that should be used by an experienced administrator or at the request of the Pragma Technical Support team.

Optimized Screen Scraper Procedure

Improved full console screen handling. Increases speed of screen redraws and allows client size changes during a session.

User Defined Packet Size

Users may specify the largest packet size sent to the client. This optimizes the data transfer rate for connections on Modems to a T-1.

Slow Connection

Reduce redraw problems due to information being lost by slow clients.

Server Heartbeat

A server heartbeat can be sent to monitor sessions that may have terminated abnormally, without notification to the server, such as if the client computer loses power and the connection is lost. In this situation Winsock does not always recognize the connection as lost and therefore the server believes the connection is still good.

Pragma Session Manager

Pragma Session Manager is a connection-oriented application to manage server connections. Information is refreshed automatically as soon as a session is established with the server.  This can be used to logoff users from the server or any remote machine.

Error Message Handling

Both in the Event Log and also error messages displayed to the user.

Server Environment Variables

Each session has unique variables created by the server to notify the user of session information.

Ability for programmatic interaction between application and client

Each session provides a programming mechanism for the application to write directly to the client.

See Programming for SSH Sessions for more information.

Color Support

Full ANSI color support.

Gray Scale Support

4 level gray scale support for monochrome terminals.

Reverse Video

Enable the User Shell to run in reverse video, dark foreground on light background.

PC Keyboard Support

Support for PC keys such as PAGEUP, PAGEDOWN, INSERT, DELETE and others.

Multiple Terminal Emulation

ANSI, Digital VT100, VT220, VT320, VT420, and WYSE terminal support – Dynamic character mapping using the charmap.ini file

Complete support of Internet RFC 4250, 4251, 4252, 4253, 4254, 4256, 4335, 4344, and 4345

Pragma Fortress SSH Server follows the standard SSH protocol specifications, preventing conflicts with any ssh client that also follows the standards. Pragma Fortress SSH Server does include some proprietary protocol, when used with Pragma's Console SSH Client.

Windows User Authentication

Integration with Windows native security to allow user logon authentication via Windows user account database. This prevents the need to maintain a separate database for users. All privileges are granted or denied by the operating system for increased security.

Variable Screen Size Support

Support for screens larger or smaller than 80x24. Pragma Fortress SSH Server can support any console window size, depending on the resolution of the server. The maximum would be the server maximum window size, not buffer size. The maximum window size is the largest console window that can be opened without a right scroll bar.

Control C support

Control-C can be allowed to abort a running program. It can also be denied so that a user cannot exit the application and gain access to the user shell

Control-G support

The Control-G sequence can be allowed or denied for making the bell on the server. This can prevent a server annoyance for users continuously making the system beep.