Unable to lockdown DVLS Console, if only Gateway is installed in standalone mode
Unable to lockdown DVLS Console, if only Gateway is installed in standalone mode
0 vote
Good morning Devolutions
As the subject implies, we found out that there is no way to put console password in the DVLS Console, if there is only Gateway installed in standalone mode.
This potentially gives access to the gateway configuration to other support teams - which are connecting to the same server.
All Comments (1)
Good morning,
Thank you for your request. You're right, the Gateway installation can't be blocked by a password. A password security was added long time ago because you can find sensitive information in the server configuration and you probably don't want a user to be able to point easily on a different database for example and maybe get access to information that he should not access. In the Devolutions Gateway, there is no sensitive information. And even if we would block the gateway configuration, it would always be possible for the user to access the Devolutions Gateway config file saved on disk. So the security would not be that much increased. We're taking note of your feedback and we will follow this topic to see if there's any additional interest or input from other users.
Best regards,
François Dubois