On Thu, Aug 8, 2024 at 7:48 AM hugues blakime <huguesblak...@gmail.com> wrote:
> > > Hello, please I have a small problem would it be possible to prevent a > user from making an SSH connection to another connection to which he should > not see access via guacamole? > > Envoyé à partir de Courrier > <https://go.microsoft.com/fwlink/?LinkId=550986> pour Windows > > > I'm not sure I fully understand, and you may need to explain a bit more what you mean by this, as your question isn't clear. Depending on how you configure Guacamole, and what privileges you give to users, Guacamole allows you to control access to the connections and limit what connections users can access. However, if your question is, if a user connects to system via SSH from Guacamole, and then uses that SSH connection to then make another SSH connection to a different system, and you're trying to prevent that second connection from happening, the answer is, no, Guacamole cannot help you secure the remote systems to which users are connecting - you will need to apply that security on those systems. In the situation that I think you're asking about, you'd need to do one or both of the following: * Disable the SSH client on the systems to which Guacamole is connecting, to prevent further SSH connections. * Use the host-level firewall on the systems to either a) prevent inbound SSH connections from anywhere except the Guacamole host, or b) prevent outbound SSH connections from those hosts. -Nick
