Skip to content

Commit 54f444f

Browse files
asamborskiMaddy-Cloudflare
authored andcommitted
Changelog entries for SSH with Access for Infrastructure and Logpush support for SSH command logs (#23497)
* Changelog entries for SSH with Access for Infrastructure and SSH command logs Logpush support * Update src/content/changelog/access/2024-10-01-ssh-with-access-for-infrastructure.mdx Co-authored-by: Maddy <[email protected]> --------- Co-authored-by: Maddy <[email protected]>
1 parent cf504f8 commit 54f444f

File tree

3 files changed

+31
-0
lines changed

3 files changed

+31
-0
lines changed
264 KB
Loading
Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
---
2+
title: Eliminate long-lived credentials and enhance SSH security with Cloudflare Access for Infrastructure
3+
description: Use short-lived SSH certificates and fine-grained policy to secure access to your SSH servers.
4+
date: 2024-10-01T6:00:00Z
5+
---
6+
7+
Organizations can now eliminate long-lived credentials from their SSH setup and enable strong multi-factor authentication for SSH access, similar to other Access applications, all while generating access and command logs.
8+
9+
SSH with [Access for Infrastructure](/cloudflare-one/applications/non-http/infrastructure-apps/) uses short-lived SSH certificates from Cloudflare, eliminating SSH key management and reducing the security risks associated with lost or stolen keys. It also leverages a common deployment model for Cloudflare One customers: [WARP-to-Tunnel](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-warp-to-tunnel/).
10+
11+
SSH with Access for Infrastructure enables you to:
12+
- **Author fine-grained policy** to control who may access your SSH servers, including specific ports, protocols, and SSH users.
13+
- **Monitor infrastructure access** with Access and SSH command logs, supporting regulatory compliance and providing visibility in case of security breach.
14+
- **Preserve your end users' workflows.** SSH with Access for Infrastructure supports native SSH clients and does not require any modifications to users’ SSH configs.
15+
16+
![Example of an infrastructure Access application](~/assets/images/changelog/access/infrastructure-app.png)
17+
18+
To get started, refer to [SSH with Access for Infrastructure](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/).
Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
---
2+
title: Export SSH command logs with Access for Infrastructure using Logpush
3+
description: Easily configure automatic export of SSH command logs to third-party storage destinations or to security information and event management (SIEM) tools.
4+
date: 2025-01-15T6:00:00Z
5+
---
6+
7+
:::note[Availability]
8+
Only available on Enterprise plans.
9+
:::
10+
11+
Cloudflare now allows you to send SSH command logs to storage destinations configured in [Logpush](/logs/about/), including third-party destinations. Once exported, analyze and audit the data as best fits your organization! For a list of available data fields, refer to the [SSH logs dataset](/logs/reference/log-fields/account/ssh_logs/).
12+
13+
To set up a Logpush job, refer to [Logpush integration](/cloudflare-one/insights/logs/logpush/).

0 commit comments

Comments
 (0)