Bomgar Box™ Secure Deployment Guide

Overview of Security Features and Secure Options

PDF Version (387KB)   Email This Item

The Bomgar Box™ provides multiple features designed to insure the security of remote support sessions. Local security functionality exists to insure proper security controls around support representative accounts. Secure communication is provided through the use of standard encryption protocols. Client security is achieved through controls given to the remote support recipient where he or she can determine the level of access a support representative is granted. Furthermore, the remote support recipient can take control of the support session at any time.

The Bomgar Box™ supports account security, and the notion of Least Privilege access, through the use of account-based access controls. The access controls limit the functionality that a given account may have. For example, support desk representatives can be prevented from accessing the recorded support sessions. Through the use of group policies, permissions can be enforced easily across multiple accounts.

The Bomgar Box™ utilizes SSL (Secure Sockets Layer) encryption for screen sharing sessions. The use of 256-bit AES SSL for encrypted sessions meets industry best practice. It is utilized to protect against eavesdropping and session hijacking. The Bomgar Box™ also supports the ability to utilize SSL to secure LDAP directory access and when accessing the appliance's public web interface.

In addition to the security functionality built into the appliance, the Bomgar Box™ places security in the control of the user. At any time during the screen sharing session, the client can take over control of his or her computer and terminate the session sharing by clicking on the large red "X" icon. Furthermore, the Bomgar Box™ allows the remote user to grant various levels of access to his or her computer. For example, the remote user may authorize the remote support representative to have "view only" access to his or her computer screen.

More details on the specific security functions and Symantec's recommended settings are provided in the following sections.