Agilicus Connector

Agilicus Connector Overview

The Agilicus Connector facilitates connection from a bastion network and end-users. It installs on a device somewhere inside the protected network, making an outbound connection.

If you are new to the system, you may try a full ‘demo’ setup with your own connector in a virtual enviroment in our system, with no install. See “Agilicus AnyX Demo“. When you ‘create a connector’ it will offer you a ‘demo’ this will create a new virtual environment to test in with no isntall, no obligation.

The Connector is self-updating. Once installed it will stay up to date. The live Changelog shows the updates that have occurred.

Connectors facilitate:

• shares [must have local access to the files)
• Web Applications (must have onward connectivity)
• Local authentication
• Network resources (e.g. SSH, Remote Desktop, VNC)

Theory of Operation

The Agilicus Connector creates an outbound connection, using HTTPS, to the Agilicus AnyX Cloud. This persistent connection is then used to route individual user requests back in to the appropriate resource.

Each individual inbound request first has the user identity checked (authentication), then has the user’s role (authorisation) checked, prior to being routed inwards.

The net affect is that no traffic arrives at the protected resources unless it is for:

• An authenticated user (optionally with multifactor authentication)
• An authorised action (e.g. can the user edit the wiki)
• A valid resource

This is a very strong guarantee, and, achieved without complex (or any) firewall rules.

The use of industry-standard HTTPS and WebSocket means inspecting firewalls such as Zscaler or PaloAlto can be used in the path.

If we expand the data flow for a hypothetical SSH client with animation, we will see the WebSocket flows (blue) establish, and then the ssh flow. The SSH flow is delivered from User to SSH server encrypted end-to-end: the host key is maintained intact.

High Availability Option

The Agilicus Connector supports high availability (resiliency), either natively, or, via Windows Clustering. See High Availability installation for more information.