Feature Request

Hello, Is there plans to have the ability to daisy chain gateways, so that you can have one primary gateway that is eposed to the internet (lets say it lives in the DMZ). Which if someone wants to connect to a server in the internal network, DVLS would route their connected through the gateway located in the DMZ, then to another gateway sitting on the DMZ/internal edge? Currently i dont particularly want to have a gateway on the internal network, exposed to the internet, in order for me to get access to my servers/equipment.

As per Dominic Dansereau request in forum posting: Change the session recording path I am creating a seperate request - The ability to change the recording path for the gateway via the MSI installer.

As per Dominic Dansereau request in forum posting: Change the session recording path I am creating a seperate request - The ability to change the recording path for the gateway via the gateway module in Devolutions Cloud.

Is there any plans to include a native Reverse Proxy functionallity into the Gateway agent installations? The inclution of Reverse Proxy functionallity would make the Gateway product a very viable option to handle customers/remote sites access at scale.

is there plans to give the option in the gateway menu (either in RDM or DVLS or cloud) to be able to set the desire location of recordings, to a different location. without the need to editing the json file manually.

are there plans to build in a auto session clean up, where we can set the say " delete recordings that are XX days / months old" and the system will delete the old recordings automatically?

We are currently using RDM via Parallels Client where a software is installed to record every click so we can document all changes made on our customers as an MSP. Both on servers and on websites such as M365, Azure and DNS. This is a requirement for our ISO certification. We would however love to use RDM locally with the gateway screen recording, but we had a meeting and got told that only possibility was screen recording on all open sessions simultaneously and optionally in low framerate video which can have play back issues and take up a lot of storage. A feature that screen captures only the active session or the entire app window on every click or every 1 to 2 seconds through the gateway instead of video would solve our issues and would allow us a hopefully better and smoother experience with the RDM. Screenshots take up less storage and don't have compatibility issues with viewing / playback.

So we installed a gateway that uses a specific external IP address. Only this address can access some resources inside other networks. We would like to be able to run Powershell scripts (even without a AD active) on the servers the gateway can connect to.

Hello, After several tests, we noticed a difference in behavior between local recording through RDM and remote recording through Devolutions Gateway. We understand that: Local recording via RDM is managed directly from the user workstation, which provides more flexibility regarding certain output parameters, specially the generated file name. Remote recording through the Gateway is designed more for centralized management, session traceability, and auditing purposes, with a more controlled and consistent handling of recordings. However, in our environment, we would need the ability to customize file names for recordings generated through Devolutions Gateway as well, in order to better integrate them into our workflow and archiving processes. Would it be possible to consider adding this functionality in a future version of Devolutions Gateway? Thanks for your feedback.

Hello, Before installing the Gateway, I used the "Check if host is online" feature in RDM daily to verify whether the host responded to ping and whether a specific port was open. However, this function doesn’t work through the Gateway, as the session is still initiated directly from RDM. Implementing this feature through the Gateway could be very useful. thank you

Hi! Regarding Installation on a Windows Server it would be good to have a supported option to define another gateway service account than NETWORK SERVICE. For example - session recording to SMB-Share requires authentication. It is actually possible to access a share and use it for session recording when changing the gateway service account to one that has access to that share. But there are caveats: you need to manually adept NTFS permissions for the gateway folder within "Program Data" for the new service user triggering gateway update from devolutions server/RDM fails (ERROR listener{port=7171}:https{client=xx.xx.x.xxx:61728}:request{method=POST path=/jet/update}: devolutions_gateway::http: error=500 Internal Server Error at devolutions-gateway\src\api\update.rs:68:9: failed to write the new `update.json` manifest on disk [source: Access is denied. (os error 5)])) everytime you modify the gateway-configuration from the server console (companion tab), the service-account automatically changes back to NETWORK SERVICE BR

It could be a nice function in the devolutions server interface to get the possibility to restart the gateway service and also schedule a restart to when no useres is connected like when doing a update of the gateway.

I am opening this feature request on behalf of a customer regarding bandwidth performance for Website sessions routed through Devolutions Gateway. The main topic is file transfer throughput when using a Website session through the Gateway compared to a direct connection. Customer-reported results: Through Devolutions Gateway: approximately 2 MB/s Without Devolutions Gateway: approximately 100 MB/s During internal testing, we also observed a notable difference in bandwidth results: Through Devolutions Gateway: approximately 95 Kb/s Without Devolutions Gateway: approximately 260 Mb/s Could the team review the current bandwidth behaviour for Website sessions through Devolutions Gateway and evaluate whether performance improvements, configuration recommendations, or documentation updates could be considered? Thank you.

Hi We have 85 gateways running and we have our own SSL Certificate on all the gateways to support the HTTPS, it will be nice with a function to rollout a new cert directly from the Devolution server interface also now SSL Certs life time is getting shorter and shorter its a big job to go to all gateways and replace the cert each time is should be renewed.

A feature to implement session recording for entries based on what user/user group are executing it. Currently the recording is configured per entry (inherited from vaults, specific entries and so forth). This is fine and all, but what i feel would be a great addition to this would be an extended option to have session recording on a user-based permission level. So that i can edit a specifi user or user-group and force recording when they connect to a entry regardless if the entry have been configured for recoring or not. The session recording is then collected from the user rather than the entry. Let’s say a supplier is given permission to login to the system and then get handed permission to view certain entries and for some reason those entries have been configured wrongly regarding the recordings so that they’re not turned on. Or maybe the entry should not be recording every connection to it, because it contains sensetive information of some kind or for whatever other reason. But nevertheless, we would like to see what the supplier was doing on the server to safeguard ourselves in case something happens. Basically, adding a configuration on user level to force recordings.

HI simliere with the uptions to update devolutions gateway from the DVLS portal will it be nice if the devolutions agent is autoupdating og that its posibel from the DVLS portal and posibel to see version status an nother good thing will be the posibility to control the Agent from the DVLS so its posible to enable the functions on the agent that way ex enable DVLS GW update function with out to go to the server and update the config ini file

Hello, I’m posting here on behalf of one of our clients. They are currently configuring session recordings through gateways within a gateway farm. While planning to record sessions, they encountered a limitation related to the user vault. At the moment, it is not possible to record sessions via the gateway for user vaults, nor can recording be enforced on entries stored in the user vault. Would it be possible to have session recording via the gateway disabled by default for the user vault, with the option for administrators to enable it if they wish to enforce recording through the gateway? We’d be interested to hear your thoughts on this. Thank you in advance, and I look forward to your reply. Best regards,

Hi, we are using RDM and are on the road to get an PAM Tool. Cause of using RDM now for 14 years, we had a look on many diffrent PAM Tools. All of them are not able to open an SAP GUI connection without RDS. Is it possible to use it by tunneling through the Devolutions gateway?

Hello, Can support be added for the Devolutions Gateway to work through an Entra Private Network Connector to allow for remote access? Alternatively and it would be even better IMO for Devolutions Hub for Business to handle the proxy of the connections instead of having to use a 3rd party to provide the access. I know support is there for Ngrok and Cloudflare Tunnels which support a TCP protocols which I don't believe Entra PNC supports. With that being said, having to purchase another tool isn't as trivial to get the remote access from anywhere capabilities working that the Devolutions Gateway offers. Thank you!

We'd like to deploy Devolutions-Gateway on a fleet of raspberry pi via docker. Having an ARM64 image on docker hub would be very usefull so as to not have to maintain our own docker image.

Hi, At the moment it's not possible to configure the Dell iDRAC (Web) entry with the Devolutions Gateway type in the VPN/Tunnel/Gateway section. Is it possible to add this in a feature release?

As stated here Devolutions Gateway only works connecting directly to a RDP server and not to a server behind RDGW.

Hello, currently I'm a bit confused about the overall product lineup, so I hope you might be able to help me. What I want to achieve is being able to connect to my server clientless from a web browser. This is just for personal use - so one person only. From what I gathered the standalone gateway is free for that use case and it was easy to implement that. Now I can access my server via browser. Opening the port to the internet seemed risky to me, that's why I'd open that via a cloudflare tunnel. I read in other posts here though, that it is fine to open the gateway to the internet. In that case I'd at least like to have some 2FA implemented and not just username and password. Is it possible though, to configure the standalone version with 2FA? If not, what is the easiest most straightforward way to implement web access to one machine with 2FA or comparable with your products? Kind regards, Alexander

Hello everyone The need to allow access to the gateway server on the non-standard port 8181 is very inconvenient and, in those environments where non-standard ports are blocked from outgoing, makes it impossible to use the tool. So the RFC is to be able to manage the tunneling of an RDP session only on the standard port 443. Thanks

Hello. In the context of using the gateway to connect to customer infrastructure, it would make sense if the Gateway were to initiate an outgoing connection to the DVLS Server. This is the way Zabbix and other tools with proxies work. Currently, we need to request TCP 7171 and TCP 8181 to initiate connection towards the customer, which is not always acceptable for CISO. Thank you. Marcel