Website Security & Threat Management
Introducing SSH command logging

Introducing SSH command logging

3/18/2022 · Ankur Aggarwal, Eduardo Gomes, Kenny Johnson

What this post added

Introduces SSH command logging as a new capability within Cloudflare Zero Trust, extending the Secure Web Gateway to inspect and log SSH traffic at the network layer. This feature provides full replay of commands run during SSH sessions, including across jump-hosts, without requiring software installation on individual machines. Logs are encrypted with customer-provided public keys, and an opt-in FIPS 140-2 mode is available. User authentication is handled via Cloudflare Short-Lived Certificates.

Read the original post ↗