How to ensure that password are not recorded when ssh session recording is enabled to meet security compliances like PCI DSS 3.2 , HIPAA, SOX, SOC2, FFIEC, NERC CIP, ISO 27001 ?

To ensure that passwords are not recorded when ssh session recording is enabled, simply set the ssh session recording to Output only which means only STDOUT is recorded. This would record only what is displayed on the users screen or terminal which is the STDOUT, so the user input when he runs a command on the ssh session and the output of the command executed is recorded.

 

Navigate to Settings->General->SSH Session Logging to select ssh session recording mode.

ssh session recording

5 (1)
Article Rating (1 Votes)
Rate this article
    Attached Files
    There are no attachments for this article.
    Related Articles RSS Feed
    How to change the private key in use and change the default public key in use?
    Viewed 2534 times since Fri, Dec 1, 2017
    Set SSH User Expiry
    Viewed 1138 times since Thu, Sep 20, 2018
    Access Keyword 2FA explained
    Viewed 558 times since Wed, Jan 30, 2019
    Can I use Google 2FA, Yubikey , DUO simultaneously?
    Viewed 2647 times since Thu, Dec 14, 2017
    Configure ssh timeout in ssh gateway
    Viewed 2462 times since Fri, Dec 1, 2017
    Record ssh sessions
    Viewed 3196 times since Fri, May 4, 2018
    record rdp session
    Viewed 996 times since Thu, Dec 6, 2018
    Enable Google reCaptcha
    Viewed 483 times since Fri, Feb 1, 2019
    How to stream the ssh sessions in real time?
    Viewed 3277 times since Wed, Nov 22, 2017
    encryption used in ezeelogin use to secure information stored
    Viewed 1986 times since Thu, Jun 15, 2017