Skip to content
Merged
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
---
title: Eliminate long-lived credentials and enhance SSH security with Cloudflare Access for Infrastructure
description: Use short-lived SSH certificates and fine-grained policy to secure access to your SSH servers.
date: 2024-10-01T6:00:00Z
---

Organizations can now eliminate long-lived credentials from their SSH setup and enable strong multi-factor authentication for SSH access, similar to other Access applications, all while generating access and command logs.

SSH with [Access for Infrastructure](/cloudflare-one/applications/non-http/infrastructure-apps/) uses short-lived SSH certificates from Cloudflare, eliminating SSH key management and reducing the security risks associated with lost or stolen keys. It also leverages a common deployment model for Cloudflare One customers: [WARP-to-Tunnel](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-warp-to-tunnel/).

SSH with Access for Infrastructure enables you to:
- **Author fine-grained policy** to control who may access your SSH servers, including specific ports, protocols, and SSH users.
- **Monitor infrastructure access** with Access and SSH command logs, supporting regulatory compliance and providing visibility in case of security breach.
- **Preserve your end users' workflows.** SSH with Access for Infrastructure supports native SSH clients and does not require any modifications to users’ SSH configs.

![Example of an infrastructure Access application](~/assets/images/changelog/access/infrastructure-app.png)

To get started, see [SSH with Access for Infrastructure](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/).
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
---
title: Export SSH command logs with Access for Infrastructure using Logpush
description: Easily configure automatic export of SSH command logs to third-party storage destinations or to security information and event management (SIEM) tools.
date: 2025-01-15T6:00:00Z
---

:::note[Availability]
Only available on Enterprise plans.
:::

Cloudflare now allows you to send SSH command logs to storage destinations configured in [Logpush](/logs/about/), including third-party destinations. Once exported, analyze and audit the data as best fits your organization! For a list of available data fields, refer to the [SSH logs dataset](/logs/reference/log-fields/account/ssh_logs/).

To set up a Logpush job, refer to [Logpush integration](/cloudflare-one/insights/logs/logpush/).