PRODUCTS > BETA > VSHELL > FEATURES
Send us a question or comment

VShell® Features

PRINT THIS PAGE
Three New Editions of VShell with FTP over SSL (FTPS) Support    
 

VShell with FTPS is now available in Administrator, Workgroup, and Enterprise Editions.

 
 

Secure file transfer using the FTP protocol in which all data sent or received is protected by SSL/TLS based encryption.

 
 

The FTPS module honors existing VShell settings for Virtual Roots, Access Control Lists, Connection Filters, Triggers, Deny Host, Logging, and User Database.

 
Logging      
 

New W3C extended log file format allows the use of third party log tools to analyze VShell activity.

 
 

All log messages can now be sent to a remote syslog or syslog-ng server.

 

All log messages can now (optionally) be sent to the Windows Event Log.

 
VShell Control Panel Makeover    
 

Increased size of the VShell Control Panel.

 
 

Changed layout of Virtual Roots page to allow easier configuration.

 
 

Support for sortable columns on Virtual Roots, User Database, and RunAs Commands pages.

 
Internal User Database Configure VShell specific users through the new VShell Control Panel User Database page. The VShell defined users are separate from Windows System accounts.
 
Disconnect Active Sessions Administrators can now use the "who" command-line utility to disconnect active sessions.
 
RunAs Commands Users connecting to VShell can now remotely execute commands as a different user. The VShell administrator has control over who can remotely execute a command as a different user, which commands they can execute, and who the commands are executed as.
 
VShell Service Control Start and stop the VShell SSH2 and VShell FTPS services from the VShell Control Panel Common page.
 

VShell is available in four editions designed to meet the needs of every size network and organization. All VShell editions offer the same features but allow you to control costs by deciding how many concurrent connections you need.

VShell Administrator Server

Allows two concurrent client connections, and is designed primarily for remote system administration use.

 
VShell Workgroup Server

Allows ten concurrent connections, and is intended to serve the needs of a substantial group of users.

 
 
VShell Enterprise Server

Supports an unrestricted number of concurrent connections for a large user community.

 
 
VShell Administrator Server with FTPS

Allows two concurrent client connections, and is designed primarily for remote system administration use.

 
VShell Workgroup Server With FTPS

Allows ten concurrent connections, and is intended to serve the needs of a substantial group of users.

 
 
VShell Enterprise Server with FTPS

Supports an unrestricted number of concurrent connections for a large user community.

 
 
VShell Custom Server

VShell Custom Server allows large customers to deploy VShell with custom configuration of certain options. For more information on the VShell Custom server please contact VanDyke Software Sales

 
 
Multiple virtual root directories

Allows you to provide discretionary file system access to users and groups beyond their home directories.

Access control

Grant discretionary access to services by authorized users or groups. On an individual or group basis, allow or deny access to VShell features such as shell, SFTP, and port forwarding.

 
VShell triggers

Triggers allow automated actions saving time and resources following login, logout, uploads, downloads, and file/folder create, delete, and rename events.

 
Trusted authentication methods

Choose from a number of trusted authentication mechanisms including public key, Kerberos, and X.509 digital certificates to create a much more secure two-factor authentication strategy to control access to your network. (X.509 support is not available for Mac OSX and FreeBSD.)

 
SCP (RCP over SSH2) file transfers SCP file transfers using clients operating as a secure RCP replacement that forwards a remote execution request to SCP over SSH2 (not SFTP). Honors settings for logging, ACLs, and SFTP roots.
VShellConfig export and import Import and export configuration using VShellConfig to save time when backing up or moving VShell. Make backups of existing configurations and move configurations between machines.
 
Multiple host keys VShell server can support one host key per algorithm type.
RADIUS server support for SecurID authentication

VShell for Windows allows authentication through RADIUS servers using SecurID or other methods. RADIUS support is implemented through keyboard-interactive authentication.

 
Jail shell

Two configuration options, ChrootUsers and ChrootGroups, combine to restrict users and members of groups to their home directory with any shell, SFTP, or subsystem operation.

 
Command-line utilities

Reduce human error and automate routine tasks using command-line utilities: vsftp, interactive SFTP command-line utility providing quick, easy, and secure file transfer operations; vsh, command-line shell utility; vcp, command-line file transfer utility; and vkeygen, public/private key generator utility.

 
Multiple virtual root directories

Allows you to provide discretionary file system access to users and groups beyond their home directories.

 
Automated secure file transfers

Use vcp, vsftp, vsh, or any SFTP or SCP2 clients to automate and schedule unattended file transfers.

DMZ access

Secure access to files where both those within the company and those outside the company can upload and download files.

Business-to-business solutions

Create a secure cross-platform file sharing infrastructure for exchanging work products with customers and partners.

Multiple virtual root directories

Allows you to provide discretionary file system access to users and groups beyond their home directories.

Allowed/required list for authentication methods

VShell can now specify which authentication methods are allowed or required when users connect to your server.

Access control

Grant discretionary access to services by authorized users or groups. On an individual or group basis, allow or deny access to VShell features such as shell, SFTP, and port forwarding.

Authentication banner support

Display legal text when clients connect.

Filters

Configure which hosts can connect by IP address, hostname, or netmask; configure which port-forwarding requests are allowed.

Log file

Select message events that will be logged in the VShell log file (Errors, Warnings, Informational, Connection, Authentication, Forwarding, SFTP, and Debug).

Windows Control Panel

Configure VShell for maximum security and still have convenient remote access.

 
General server configuration Configure general server options like listening port, keepalives, idle timeout period, and command shell.
Host key management

Display the server's host key in a fingerprint format for easier verification.

Ciphers, MACs, and compression

Encrypt the data using the selected cipher algorithms, ensure data integrity with the selected MACs, and improve transfer speed over slower network links using compression.

 
Authentication setting

Configure authentication options by limiting the number of failed attempts, setting a timeout period for completed authentications, and setting the required authentication methods.

VShellConfig

A Windows command-line utility that allows editing of virtual roots, access control lists (ACLs), and the VShell user database.

 
Accomplish common administrative tasks

With existing secure shell utilities, add new users to the network, check print queues, and control services.

Edit files remotely

Use text oriented editors (e.g., EDIT and vi) to edit files on the remote system.

Start unattended batch jobs

VShell's support for remote command execution allows unattended jobs to be started with any Secure Shell (SSH2) client.

Remotely and securely administer servers

Securely access and administer web, mail, database, and application servers.

Option to specify alternative command shells

Use cmd.exe or other popular shells available like Bash, Korn and C Shell.

 
VT220 emulation

Superior screen rendering and keyboard control of command shells and other applications.

 
Enforce end-user scrollback mode

Force "TTY mode" from the server so clients automatically get scrollback.

 
SSH2 support

Provide secure cross-platform flexibility when connecting from a number of remote clients for shell, port forwarding, or secure file transfer.

User authentication

Control access to servers and networks using existing usernames and passwords combined with a choice of other enterprise-wide authentication methods.

Data encryption

Choose from a wide selection of ciphers including 3DES, Twofish, Blowfish, AES-128, AES-192, and AES-256 to ensure strong data encryption. RSA and DSA public-key authentications are also supported.

Data integrity

Guarantee the integrity of each message sent over the network (preventing replay or insertion attacks).

Host identity verification

Unique server host key proves its identity to a client as a "known" host (preventing a man-in-the-middle attack).

Secure Shell client compatibility

Connect with a wide variety of Secure Shell clients including: SecureCRT, OpenSSH, WRQ, SSH Communications, and other standard SSH2 clients.

 
Port forwarding

Forward TCP/IP ports to securely access standard data traffic like POP3 and SMTP over the internet and intranets through a single, secure, multiplexed channel.

Public key-only authentication

Automate unattended file transfers and batch jobs. Can also streamline logon process for users.

 
Public Key Assistant support

Make it possible for users to upload their own public keys with a click of a button.

Agent

Agent forwarding support allows transparent authentication to multiple linked servers after the first Secure Shell server has authenticated the user.

OpenSSH public-key format support

Eliminates the requirement that users with OpenSSH clients convert keys and maintain two formats.

Kerberos v5 authentication via GSSAPI

As an emerging standard, this adds to your foundation for interoperability while enhancing the security of enterprise-wide network authentication.

X.509 certificate authentication method

Comply with organization-wide PKI policies designed to protect critical information and overcome identity theft and electronic fraud.

X.509 certificate mapping

Certificate mapping associates users with digital certificates without requiring the certificates to be stored locally.

 
X.509 certificate checking

Certificate checking allows revocation checking at various levels of the chain of certification authorities.

Unattended first-time host key generation

Option to generate first-time host keys automatically following installation, simplifying enterprise deployments.

 
Additional key exchange method

Diffie-Hellman Group Exchange (GEX) allows the server to send the client variable data with which to perform Diffie-Hellman key exchange.

Keyboard interactive

Keyboard-interactive authentication allows you to customize authentication using PAM plugins. PAM plugins can, for example, enable password expiration enforcement policies or the use of SecurID cards.

 
FIPS 140-2 support for Windows

VShell for Windows uses a FIPS 140-2 validated cryptographic library. VShell can be installed in "FIPS Mode", which will use the validated cryptographic library and only allow FIPS-approved algorithms. If you need a FIPS 140-2 compliant solution for UNIX please let us know.

 
Deny Host file

This feature has been added to reduce the impact of a dictionary attack. VShell for Windows now tracks failed authentications by IP address and can add these addresses to the Deny Host file after the specified threshold has been reached. Once an IP address has been added to the Deny Hosts file, VShell will not allow future connections from that address.

 
IPv6 technologies

For strategic organizations moving beyond outdated networks incapable of handling sophisticated network traffic. WIN & UNIX. (If you need IPv6 support for AIX 4.3 or HP-UX 11 - let us know).

 
 
Message of the day

Message of the day allows communication of important new information at logon.

Remote-command execution

Kick off unattended batch files or scripts using remote command execution.

Idle timeout option

Allows timing out sessions after a configurable idle time.

Pass-through printing support

Pass-through printing allows a remote host program to print on the printer attached to your local terminal (or PC running terminal emulation).

Windows command-line utilities

In order to check who is logged onto VShell, the command-line utility Who.exe is included with VShell. The command-line utility Whoami.exe is also included.

 
Mouse support

VShell provides mouse support for character-based applications running in a command window.

 
Local or domain user logon

Logon to a local NT machine or the network domain.

 
Try before you buy free evaluation copy

Official software releases can be downloaded and evaluated for 30 days without charge.

Open beta software releases

Beta software releases can be downloaded and evaluated for 30 days without charge.

One-year software updates

All registered users receive a year of software updates.

One-year technical support

All registered users receive a year of technical support by e-mail from VanDyke Support.

Software maintenance available

Software updates and support are available after the first year.

Rehabilitation Act Section 508 compliance

In 1998, Congress amended the Rehabilitation Act to require Federal agencies to make their electronic and information technology accessible to people with disabilities. Inaccessible technology interferes with an individual's ability to obtain and use information quickly and easily. Section 508 was enacted to eliminate barriers in information technology, to make available new opportunities for people with disabilities, and to encourage development of technologies that will help achieve these goals. VShell Server has been registered as a compliant product at the Section 508 database. Voluntary Product Accessibility Template (VPAT) documents detailing this compliance are available online in Microsoft Word format.

VShell Server VPAT