Pragma TelnetServer offers several different levels of security to meet the security needs of a wide variety of computing environments. The different security features are:

•Integration with the Windows Security Model

•Allow only Configured Users Access to the TelnetServer

•Allow only Configured Groups Access to the TelnetServer

•IP Security (Filtering)

•Telnet through SSL

Encrypted Login between TelnetServerand Pragma's Console Telnet Client

Encrypted Session

Integration with the Windows Security Model

Pragma TelnetServer is fully integrated with the Windows security model. Each user is verified by their user name and password using the Windows accounts database. This allows only valid Windows users, domain or local, the ability to establish telnet login sessions. In addition, user accounts need to have Log on Locally user rights to be able to logon via telnet successfully. The same requirement as Windows for users to log on to the system.

Each telnet session started by Pragma TelnetServer gets the security context of the user logging on. Windows will enforce all security and access controls on the telnet session. All processes started by the telnet session will have the logged-on user as the owner. Similarly, files created on NTFS disks will have the telnet user as the owner of the files.

Allow only Configured Users Access to server

Pragma TelnetServer allows an administrator to configure settings for a session on a per-user basis. See User Management. The administrator also has the option of restricting access to only those users with an explicit Pragma TelnetServer configuration. With this setting enabled, in addition to needing a valid Windows account, a user will also need to be configured under Pragma TelnetServer. Restrictions can be granted based on protocol as well, allowing only certain users SFTP or SCP access.

Allow only Configured Groups Access to the server

Pragma TelnetServer allows an administrator to configure settings for a session on a per-group basis. See Group Management. The administrator also has the option of restricting access to only those groups with an explicit Pragma TelnetServer configuration. With this setting enabled, in addition to needing a valid Windows account, a user will also need to be configured under Pragma TelnetServer. Using this option with the Allow only configured users option, a user must be both a member of the allowed groups and allowed users. Restrictions can be granted based on protocol as well, allowing only certain groups SFTP or SCP access.

IP Security (Filtering)

The InetD Service can be configured to grant or deny access to the system based on IP Address. See Configuring Services in InetD for more information. IP addresses can be explicitly granted or denied access, preventing connections from outside of the network or from an unknown IP address.

Telnet through SSL

Using a client that also supports SSL, the entire telnet session can be encrypted with the standard SSL protocol. The connection is made on a different port from the standard telnet connection, so that both open and encrypted sessions can be allowed to a single server.

Encrypted Login between Pragma TelnetServer and Pragma's Console Telnet Client

Using Pragma's Console Telnet Client (1 license included), the username and password can be encrypted with Pragma Systems's proprietary encryption. This is accomplished using the /s switch with the Console Telnet Client. TelnetServer can also be configured to accept only encrypted logins. See General Settings.

Encrypted Session

Encrypted sessions implemented with Microsoft's Crypto system. It uses RSA industry standard 40-bit or 128-bit encryption algorithms for the tightest security available. See Encrypted Sessions for more information.