Introducing SSH command logging
Mar 18, 2022Ankur Aggarwal, Eduardo Gomes, Kenny Johnson
Summary
Introduces SSH command logging as a new capability within Cloudflare Zero Trust, extending the Secure Web Gateway to inspect and log SSH traffic at the network layer. This feature provides full replay of commands run during SSH sessions, including across jump-hosts, without requiring software installation on individual machines. Logs are encrypted with customer-provided public keys, and an opt-in FIPS 140-2 mode is available. User authentication is handled via Cloudflare Short-Lived Certificates.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack