Remote Console
The remote console feature allows users to securely connect to the specified server via SSH, VNC, Telnet, and RDP through a web browser, depending on the server information registered by the administrator. Additionally, URL-based web management consoles such as Jenkins, Grafana, and Kubernetes Dashboard can also be registered as Web type for integrated management in the remote console menu.
Users can access the server in a web isolation browser (RBI) environment without installing a separate client program, and can enter commands or upload/download files.
1. Feature Overview
This feature provides SSH, VNC, Telnet, RDP-based remote access and URL-based web management console access in a web browser environment. When an administrator registers the server information or URL needed for remote access, users can connect to the registered items with a single click.
- Access is provided through the browser, and depending on the server type, it is offered in the form of a terminal, GUI screen, or web page.
- You will be automatically logged in with the information pre-registered by the administrator without the need for separate authentication input.
- Communication with the server occurs in an environment where RBI security is applied.
2. Server Type
The remote console supports the following five types of servers.
**SSH (Secure Shell)**Provides command-line terminal access to the server through an encrypted secure connection. Supports file upload/download functionality. Recommended as the safest method for remote access.
**VNC (Virtual Network Computing)**You can display the GUI screen of a remote server in the browser and control it in real-time with a mouse and keyboard. It is suitable for tasks that require a graphical user interface. File upload/download functionality is not supported.
**RDP (Remote Desktop Protocol)**You can display the GUI screen of the Windows server in a browser and control it in real-time with a mouse and keyboard. It is used when graphic-based tasks are needed in a Windows server environment. It operates within the RBI isolation environment without the need for a separate RDP client installation and is automatically authenticated with the registered ID/password. File upload/download functionality is not supported.
TelnetThis is a feature for accessing legacy systems or old network devices via a text-based terminal. Since it uses an unencrypted protocol, it is recommended for use only in internal testing environments or for managing legacy equipment. File upload/download functionality is not supported.
WebThis type allows for integrated management of web management consoles accessed via URLs, such as Jenkins, Grafana, and Kubernetes Dashboard, from the remote console menu. Instead of registering IP/port, URLs are registered, and when accessed, the web page of the corresponding URL opens within the RBI isolation environment. It supports file upload/download functionality. In addition to URL registration, it also supports the registration of SAML SSO apps such as Microsoft 365, Kintone, and Box (refer to [3. Server Registration Method] for SSO app registration below).
3. How to Register a Server
Server registration is performed on the admin page, and the input fields vary depending on the server type.
| item | Explanation | SSH / VNC / Telnet / RDP | Web |
|---|---|---|---|
| Server Type (Required) | Select the type of server you want to register. | SSH / VNC / Telnet / RDP | Web |
| Server Name (Required) | This is the name that will be displayed to the user. (No duplicates allowed) | ✅ | ✅ |
| Description (optional) | This is a note for administrator reference. | ✅ | ✅ |
| URL (Required) | This is the URL of the web management console to connect to. | ❌ | ✅ |
| IP address (required) | This is the IPv4 address of the server to connect to. | ✅ | ❌ |
| Port (Required) | This is the connection port number. | ✅ | ❌ |
| ID (Required) | This is the server login account ID. | ✅ | ❌ |
| Password (required) | This is the server login account password. | ✅ | ❌ |
You must enter accurate values for the connection information to the server. If you enter incorrect information, the user may fail to connect.
Web Type SSO App Registration
The web type allows for registration of URLs directly, in addition to,SAML SSO (Single Sign-On) Appsupports the method of registering as. When SaaS services like Microsoft 365, Kintone, Box are registered as SSO apps, you can automatically access each service's SSO integration without entering a URL.
Registration Procedure
- [Server Registration]In the slide that opens when clickedConnection TypetoWebSelect.
- SSO App Statusis set to use.
- Choosing an SSO ServiceSelect the desired service from the list. Services are displayed grouped by category.
- Microsoft 365 Category: Outlook, Word, Excel, PowerPoint, OneDrive, Teams, etc.
- Collaboration Tools Category: Kintone, Box, etc.
- Information is automatically configured based on the selected service.
- name: The selected service name is entered as the default and can be modified.
- icon: The fixed icon of the selected service is automatically displayed and cannot be changed.
- No need to enter a URL: The SSO app automatically connects through service-specific SSO integration, so the access URL is not entered.
- After entering the description (optional), click **[Save]** to complete the registration.
A general Web server registers URLs, but the SSO app automatically connects to the SSO integration of the selected SaaS service without entering a URL.
SSO Configuration — Prerequisites
Before registering the SSO app, the service-specific SSO settings (Federation · SAML Client) must be completed.
Microsoft 365 Services
- The administrator must be logged into SHIELDGate with a Microsoft account.
- The federation setup between SHIELDGate and Microsoft Azure AD (Entra ID) must be completed.
- If all the above conditions are met, Microsoft 365 SSO app registration is possible.
Other Services (Kintone, Box, etc.)
- The SAML client for the service must be registered in advance.
- Individual SAML client registration is required for each service.
Domain Unit Registration Guide
- If multiple domains are connected to a single Microsoft tenant, a separate SSO app must be registered for each domain.
- Example: If there are a.com and b.com in the same tenant, register Outlook (a.com) / Outlook (b.com) / Teams (a.com) / Teams (b.com) respectively.
4. Server List Management
Server List Screen
Registered servers can be checked in the list, and information such as server type / name / description / IP (or URL) / port / last modified date is displayed.
Server Modification
You can modify the information of the registered server. The editable items are server name, description, IP address (or URL), port number, and ID/password.
The server type cannot be modified. To change the server type, you must delete the server and register a new one.
Delete Server
If you delete the server, it will no longer be displayed on the user screen. The connected session will be maintained.
5. User Access Flow
User Page - Remote Console List
Users can check the list of registered servers in the remote console menu. Filtering by type is possible with the top filter chip.
All / SSH / VNC / Telnet / RDP / Web
Each server card displays the server type, allowing you to select and connect immediately without separate authentication input.
Screen after login
- SSH server: A terminal runs within the browser, providing command input and file transfer functionality.
- VNC Server: The GUI screen of the remote server is displayed in the browser, and can be controlled with the mouse and keyboard.
- RDP Server: The GUI screen of the remote Windows server is displayed in the browser, and can be controlled with the mouse and keyboard. A shortcut key transmission panel (Ctrl+Alt+Del, etc., including translation) similar to VNC is provided.
- Telnet server: A text-based terminal will run within the browser.
- Web server: The web management console page of the registered URL opens within the RBI isolation environment. The same screen as accessing with a regular web browser is displayed, and file upload/download functionality is provided.
From the user's perspective, it can be used as naturally as a local terminal or remote desktop, and communication with the server takes place in an environment secured by RBI.
6. Guidance and Recommendations
- If the registered server information is not accurate, the user will fail to connect when attempting to access. Please be especially careful to avoid typos when entering IP, port, ID/PW.
- For web types, please verify in advance whether the registered URL is correct and whether the URL is accessible from the outside.
- Currently, the connection test feature is not provided in the registration stage, so it is necessary to check in advance whether the server access permissions are set correctly before registration.
- If the port is blocked on the server side or password authentication is disabled, you may not be able to connect, so please also check if the connection information is configured according to the server environment.
- The Telnet protocol is not encrypted, so it is recommended to use SSH in environments where security is important.