Chapter 4 Configuring SSH Tectia Server

Table of Contents

ssh-server-config - SSH Tectia Server configuration file format

SSH Tectia Server
General
Proxy Rules
Identity
Network
Logging
Certificate Validation
Defining Access Rules Using Selectors (Advanced Mode)
Connections and Encryption
Authentication
Services

SSH Tectia Server uses an XML-based configuration file ssh-server-config.xml that allows flexible implementation of real-life enterprise security policies.

The configuration file follows the same logic that is used in setting up a Secure Shell connection:

The client initiates a connection to the server.
The server checks whether connections from the client address are allowed. The client and server perform key exchange where the server authenticates itself to the client, and ciphers and MACs are selected for the connection.
The server requests the user to authenticate itself to the server. The server may offer a selection of authentication methods, or require several authentication methods to be passed in succession.
The server determines the services the client is allowed to use.

The configuration file can be edited with an ASCII text editor or an XML editor (see ssh-server-config(5)). On Windows, you can use the included SSH Tectia Server Configuration tool (see Configuration Tool (Windows)).