The SSH Protocol Audit System Based on Proxy Technology

SSH protocol is commonly used to connect to a server in the enterprise network for operation and maintenance (O&M). However, it also brings some security problems in the monitoring and auditing because the protocol itself encrypts and compresses the transmission data. This article will introduce an SSH protocol audit system based on the proxy technology. Our system can completely monitor all the accessing for SSH, SFTP, SCP, and provide playback function by all the operations from users. It can solve some of the problems that exist in the enterprise O&M operations.