Satisnet Ltd, Basepoint Innovation Centre, 110 Butterfield Great Marlings, Luton, Bedfordshire, LU2 8DL enquiry@satisnet.co.uk
+44 (0) 1582 434320

Balabit Shell Control Box

PRIVILEGED USER MONITORING

Shell Control Box (SCB) is a user monitoring appliance that controls privileged access to remote IT systems, records activities in searchable, movie-like audit trails, and prevents malicious actions. SCB is a quickly deployable enterprise device, completely independent from clients and servers - integrating seamlessly into existing networks. SCB is a core component of the Contextual Security Intelligence Suite (CSI). It captures the activity data necessary for user profiling and enables full user session drill down for forensic investigation in CSI.

Product Point Icon

Granular Access Control

Shell Control Box acts as an application level proxy gateway. The transferred connections and traffic are inspected on the application level (Layer 7 in the OSI model), rejecting all traffic violating the protocol – an effective shield against attacks. This high-level understanding of the traffic gives control over the various features of the protocols, like authentication and encryption methods used in SSH connections, or channels permitted in RDP traffic.

Product Point Icon

Strong Authentication and Authorisation

Shell Control Box can enforce the use of two-factor authentication methods and also verify the public key of the users. Shell Control Box has a built-in capability to verify the SSH host keys and certificates identifying the servers, preventing man-in-the-middle attacks and other threats. This authentication is completely independent from the authentication that the user performs on the remote server. To avoid accidental misconfiguration and other human errors, Shell Control Box supports the 4-eyes authorization principle as well.

Product Point Icon

Smooth Integration

To ensure integration into your network infrastructure is seamless, Shell Control Box is available both as a physical or virtual appliance and automatically handles transparent and nontransparent connections. It can be seamlessly integrated with password management, ticketing systems, SIEM and system management tools. To simplify integration with firewalled environments, Shell Control Box supports both source and destination address translation (SNAT and DNAT).

Complimentary Products

Book a demo

Request a call