Delinea Secret Server proxy

0 vote

avatar

Delinea Secret Server has the option to use a rdp proxy.

The connection is established to the Delinea server with generated proxy credentails. Then the Delinea server opens a connection to the desired host with the real credentials.

This way, credentails never reach the users machine and sessions can be monitored over the delinea system.

Here is an explenation by Delinea: https://docs.delinea.com/online-help/secret-server/networking/rdp-proxy-configuration/index.htm

Is there a possibility to integrate this behaviour with connections from the Remote Desktop Manager

All Comments (22)

avatar

Hi Michael,

We already have a ticket opened for this and have just recently setup the Delinea RDP proxy on our side. The development for this is planned in the coming months.

Best regards,

Xavier Fortin

avatar

Hello Xavier,

Thanks for this good news! I will look out for any new development!

Best regards!

avatar

Hi michael!

RDM Windows 2024.2.14.0 is now available and comes with two new types of entries, RDP over Delinea Secret Server Proxy and SSH over Delinea Secret Server Proxy:

Those two entry types are pretty straight forward to configure. In both case, you need to:

1) Set the host you want to connect to (over Secret Server proxy)

2) Select a Secret Server credential entry used to establish the connection with the Secret Server instance and obtain the proxy host and the temporary credentials to use

3) Optionally, and if the credential entry selected is configured to prompt, you can select a specific account to uses for the authentication. If left empty, you will be prompted at launch. If the credential is not configured to prompt, the account selected in said credential will be used.

Here's an example with RDP over Delinea Secret Server Proxy:

Do not hesitate if you have any questions! And please, do tell me if it works properly for you!

Best regards,

Xavier Fortin

avatar

Hi Michael,

I received a notification for a response. Are you still having issue with the RDP over Delinea Secret Server Proxy entry? Missing the proxy specific settings?

Best regards,

Xavier Fortin

avatar

Hello Xavier,

The issue resolved when I restarted the RDM

What is not working is the usage of local specific settings when using a shared database.

We would like to have a shared database with multiple users using their own user vault and use the override credentials settings.

This is a standard RDP Session where the override works

And this is a Delinea Proxy Entry where the override does not work

Is there a solution for this?

Best regards,

Michael

avatar

Not at the moment, I will open a ticket to add override support to it though.

Best regards,

Xavier Fortin

avatar

Hello Xavier,

Can you give me an ETA for this feature?

Best regards,

Michael

avatar

Hi Michael,

Not at the moment, it depends on how much it affects the models. I'll start to work on this right now, but if I have to change models used across platforms, it might have to wait a major release before it can be available (2024.3, releasing somewhere in late-September), or at least, the first beta of this version (which would come a bit earlier).

I'll post back on this thread when I know more.

Best regards,

Xavier Fortin

avatar

Hi Xavier,

I have been testing the functionality of the Delinea Proxy Entries further and noticed that an inheritance of credentials from a folder to a RDP over Delinea Secret Server Proxy or SSH over Delinea Secret Server Proxy is not possible.

Is this something that can be added as well?

Best regards,

Michael