Pragma Fortress SSH Server offers several different levels of security to meet the security needs of a wide variety of computing environments. The different security features are:

•Integration with the Windows Security Model

•Allow only Configured Users Access to the Fortress SSH Server

•Allow only Configured Groups Access to the Fortress SSH Server

•IP Security (Filtering)

•Protocol Restriction

Integration with the Windows Security Model

Pragma Fortress SSH Server is fully integrated with the Windows security model. Each user is verified by their user name and password using the Windows accounts database. This allows only valid Windows users, domain or local, the ability to establish ssh login sessions. In addition, user accounts need to have Log on Locally user rights to be able to logon via ssh successfully. The same requirement as Windows for users to log on to the system.

Each ssh session started by Pragma Fortress SSH Server gets the security context of the user logging on. Windows will enforce all security and access controls on the ssh session. All processes started by the ssh session will have the logged-on user as the owner. Similarly, files created on NTFS disks will have the ssh user as the owner of the files.

Allow only Configured Users Access to server

Pragma Fortress SSH Server allows an administrator to configure settings for a session on a per-user basis. See User Management. The administrator also has the option of restricting access to only those users with an explicit Pragma Fortress SSH Server configuration. With this setting enabled, in addition to needing a valid Windows account, a user will also need to be configured under Pragma Fortress SSH Server. Restrictions can be granted based on protocol as well, allowing only certain users SFTP or SCP access.

Allow only Configured Groups Access to the server

Pragma Fortress SSH Server allows an administrator to configure settings for a session on a per-group basis. See Group Management. The administrator also has the option of restricting access to only those groups with an explicit Pragma Fortress SSH Server configuration. With this setting enabled, in addition to needing a valid Windows account, a user will also need to be configured under Pragma Fortress SSH Server. Using this option with the Allow only configured users option, a user must be both a member of the allowed groups and allowed users. Restrictions can be granted based on protocol as well, allowing only certain groups SFTP or SCP access.

IP Security (Filtering)

The InetD Service can be configured to grant or deny access to the system based on IP Address. See Configuring Services in InetD for more information. IP addresses can be explicitly granted or denied access, preventing connections from outside of the network or from an unknown IP address.

Protocol Restriction

Restrict access to the server based on the protocol in use. Users can be granted only shell, sftp, and/or access. A protocol can be denied completely or only granted for certain users and/or groups.