Balabit Shell Control Box
PRIVILEGED USER MONITORING
Shell Control Box (SCB) is a user monitoring appliance that controls privileged access to remote IT systems, records activities in searchable, movie-like audit trails, and prevents malicious actions. SCB is a quickly deployable enterprise device, completely independent from clients and servers - integrating seamlessly into existing networks. SCB is a core component of the Contextual Security Intelligence Suite (CSI). It captures the activity data necessary for user profiling and enables full user session drill down for forensic investigation in CSI.
Granular Access Control
Shell Control Box acts as an application level proxy gateway. The transferred connections and traffic are inspected on the application level (Layer 7 in the OSI model), rejecting all traffic violating the protocol – an effective shield against attacks. This high-level understanding of the traffic gives control over the various features of the protocols, like authentication and encryption methods used in SSH connections, or channels permitted in RDP traffic.
Strong Authentication and Authorisation
Shell Control Box can enforce the use of two-factor authentication methods and also verify the public key of the users. Shell Control Box has a built-in capability to verify the SSH host keys and certificates identifying the servers, preventing man-in-the-middle attacks and other threats. This authentication is completely independent from the authentication that the user performs on the remote server. To avoid accidental misconfiguration and other human errors, Shell Control Box supports the 4-eyes authorization principle as well.
To ensure integration into your network infrastructure is seamless, Shell Control Box is available both as a physical or virtual appliance and automatically handles transparent and nontransparent connections. It can be seamlessly integrated with password management, ticketing systems, SIEM and system management tools. To simplify integration with firewalled environments, Shell Control Box supports both source and destination address translation (SNAT and DNAT).