Secure SSH Access & Server Onboarding
Learn how to connect to backend Linux servers through the AllSafeX SSH Gateway on port 2222 and onboard target assets into the AllSafeX catalog.
Connecting via AllSafeX SSH Gateway
AllSafeX provides a dedicated SSH gateway listening on port 2222. To establish a session, run:
ssh -p 2222 username@pam.company.com
You will be prompted for your AllSafeX password followed by your 6-digit MFA token:
username@pam.company.com's password:
MFA Code [TOTP]: ******
Interactive Terminal Menu
Upon successful authentication, the gateway displays an interactive menu listing all servers you are authorized to access:
[AllSafeX Terminal Menu]
------------------------------------------------------------
ID Hostname IP Address OS Nodes
------------------------------------------------------------
[1] prod-k8s-master-01 10.0.12.10 Ubuntu Production
[2] prod-db-primary 10.0.12.20 Debian Database
[3] staging-api-01 10.0.24.15 Ubuntu Staging
------------------------------------------------------------
Enter ID, IP, or search term (or 'q' to quit): 1
Type the number of the desired target server and press Enter. The gateway dynamically negotiates the connection and logs you into the target machine.
Direct Host Jump Commands
You can bypass the interactive menu and jump straight to a specific server by specifying the target hostname:
# Direct jump syntax: username#hostname@pam.company.com
ssh -p 2222 engineer#prod-k8s-master-01@pam.company.com
Onboarding Target Servers
To register a new target server into AllSafeX:
- Navigate to Assets → Asset List → Create Asset in the web console.
- Enter the server details:
- Hostname:
prod-k8s-master-01 - IP Address / FQDN:
10.0.12.10 - Protocol:
SSH (Port 22)
- Hostname:
- Associate a System User account (e.g.
deployorubuntu) with its vaulted SSH private key. - Assign authorization permissions to the appropriate user group.
Workstation ~/.ssh/config Setup
Simplify day-to-day access by creating an entry in your local workstation's ~/.ssh/config:
Host allsafex
HostName pam.company.com
Port 2222
User engineer
ServerAliveInterval 60
Now you can connect with a single command:
ssh allsafex