COSCO Kirin Fortress Product Introduction
1. The system needs to be installed on the centos7.x system. You only need to run two commands during installation. It can be used after installation and restart.
2. It can be used for monitoring and management of certification, authorization, auditing and other operations management. The main functions are as follows:
3. Support authentication system, support external LDAP, AD, Radius authentication, built-in dynamic password, CA authentication
4. Supports authorization. You can set the host and account that users can log in to in the bastion machine. Users can only log in to authorized systems.
5. Supports SSO single sign-on. Users can log in directly with one click without entering the user name and password of the target machine.
6. Supports operation auditing, can record and retain the entire user operation, and can analyze user operation commands
7. Supports operation analysis and can generate various statistical reports for users such as login, operation, permission modification, etc.
8. Built-in SSL VPN, very suitable for cloud environment. Cloud environment users can log in to the system through the SSL VPN module to perform operation and maintenance operations.
Use of COSCO Kirin Fortress products
1.1 Installation package
System requirements: Memory >= 2G, CPU >= 1 core, hard disk >= 10G (if the system memory is less than 2G, it must have swap1G or more to operate normally)
System installation: Minimize installation of Centos7.x or use cloud template to minimize Centos 7.X
Installation package installation:
Upload centos7.tar.gz to the system/tmp/ directory
cd /tmp/
tarxpvf centos7.tar.gz
Run the following three commands in sequence to install:
bash yum.sh (must have yum source and ensure that yum can successfully install the package)
bash install.sh
init 6
After running the command, the system will restart and it will be ready to use after the restart.
After the system restarts, the default password for background login remains unchanged, but the ssh port is changed to 2288.
1.2 Open port requirements
The PC needs to be able to access the TCP 22, 443, 3389, 3390, and 18080 ports of the bastion machine
The bastion machine needs to be able to connect to the ssh, rdp and other ports of the managed server.
The PC does not need to have access to the managed server
COSCO Kirin Bastion Host Update Log
1. Optimized some functions
2. Solved many unbearable bugs
Huajun editor recommends:
Are you already ready to take action after seeing the introduction provided by the editor of Huajun Software Park above? Then quickly download the COSCO Kirin Fortress machine and use it. Huajun Software Park also providesDebianFor Linux,COSCO Kirin iAudit operation and maintenance audit system centos7 installation package,Nut Cloud (64bit) For Linux,7-Zip,WPS Office For Linux DEBWaiting for you to download and use.
Useful
Useful
Useful