4 ms·
Currently looking at bastion/jit solutions to move away from ssh keys. Two options we’ve looked at were PrivX from ssh.com and ScaleFT (now owned by Okta). Both
by someonehere 6y ago
Currently looking at bastion/jit solutions to move away from ssh keys. Two options we’ve looked at were PrivX from ssh.com and ScaleFT (now owned by Okta). Both offer role based access to servers. PrivX seems better because it allows ssh session recordings with metadata playback search. Perfect to find out who ran the wrong command and what happened before and afterwards. They also keep a copy of any files transferred in/out over the ssh session. ScaleFT is good it’s very expensive compared to PrivX.
But we are looking at using a service like this as we move to zero trust.
- jiveturkey 6y ago> Currently looking at bastion/jit solutions to move away from ssh keys. You lost me. How does bastion get you away from ssh keys?
- Vmody2 6y agoCould mean moving away from manual SSH key management to something like a bastion-hosted SSH Certificate Authority.
- alexk 6y agoCheck out our open core version as well: https://github.com/gravitational/teleport/ https://github.com/gravitational/teleport/ (I work at Gravitational)