Securing Your Instance¶
Choose the controls that protect your instance: who can sign in, what users can do during a session, how communications are encrypted, and how to trace what happened.
Each control is configured where it applies, in the Admin Area.
Control who signs in¶
Verify the identity of instance users, enforce strong passwords and limit how long sessions last.
Let users sign in with their company’s identity provider.
Require a minimum length, letters, digits and special characters.
Enforce two-factor authentication, filter IP addresses and lock accounts after failed attempts.
Automatically sign out idle sessions and limit the number of open sessions.
Control what users can do¶
Limit what users can do once they are signed in.
Restrict the clipboard and file transfers between users and remote devices.
Let users connect to resources without knowing their passwords.
Protect communications¶
Encrypt exchanges between your users, your resources and external environments.
Centralize the TLS certificates used to communicate with relays and container providers.
Keep users connected when a direct connection is not possible in RTC mode.
Connect an external environment to your instance through an isolated entry point protected by mTLS.
Know what happened¶
Audit actions, get notified of security events and replay sessions.
Review the security and administration actions performed on the instance.
Get notified of security events and follow each alert through to resolution.
Replay recorded container sessions and spot sensitive commands.