Bastionhost_efficient and secure O&M_security audit_access control_identification

{"moduleinfo":{"rightBtn":{"text":"Buy Now","url":"https://account.alibabacloud.com/login/login.htm?oauth_callback=https%3A%2F%2Fcommon-buy-intl.alibabacloud.com%2F%3FcommodityCode%3Dbastionhost_std_public_intl","partnerAddress":"#","output4Partner":false,"hideForReseller":false},"iframeResizerUrl":"#","highlightAutoNav":true},"nav":[{"txt":"Overview","anchor":[{"name":"text","id":"J_4846456180"},{"id":"J_8479902030"},{"id":"J_8308593550"},{"id":"J_6012010820"},{"id":"J_1193721050"},{"id":"J_6132085640"},{"id":"J_8773818290"}],"newWindow":false,"showLogo":true,"newAddress":"/","partnerAddress":"#","output4Partner":false,"highlight":false,"hideMobile":false},{"txt":"Pricing","anchor":[{"id":"J_5176818820"}]},{"txt":"Documentation","showLogo":true,"newWindow":true,"newAddress":"https://www.alibabacloud.com/help/product/52862.htm"}],"$root":{"moduleinfo":{"rightBtn":{"text":"Buy Now","url":"https://account.alibabacloud.com/login/login.htm?oauth_callback=https%3A%2F%2Fcommon-buy-intl.alibabacloud.com%2F%3FcommodityCode%3Dbastionhost_std_public_intl","partnerAddress":"#","output4Partner":false,"hideForReseller":false},"iframeResizerUrl":"#","highlightAutoNav":true},"nav":[{"txt":"Overview","anchor":[{"name":"text","id":"J_4846456180"},{"id":"J_8479902030"},{"id":"J_8308593550"},{"id":"J_6012010820"},{"id":"J_1193721050"},{"id":"J_6132085640"},{"id":"J_8773818290"}],"newWindow":false,"showLogo":true,"newAddress":"/","partnerAddress":"#","output4Partner":false,"highlight":false,"hideMobile":false},{"txt":"Pricing","anchor":[{"id":"J_5176818820"}]},{"txt":"Documentation","showLogo":true,"newWindow":true,"newAddress":"https://www.alibabacloud.com/help/product/52862.htm"}]},"$moduleId":"5913696540"}

Overview
Overview
Overview
Pricing
Pricing
Documentation
Documentation

Buy Now

Efficient and Secure O&M

Bastionhost enables you to manage asset O&M permissions in a centralized manner, monitor all O&M operations, and reproduce O&M scenarios in real time to facilitate identity authentication, access control, and operation audit. You can use Bastionhost to troubleshoot issues, such as difficulties in the management of various assets, unclear responsibilities and authorities, and difficulties in the backtracking of O&M events.

Efficient O&M

Bastionhost provides a centralized portal to access server resources. Bastionhost provides single sign-on to allow O&M personnel to manage and maintain all server assets, facilitating centralized asset management.
Furthermore, Bastionhost supports password-free logon for asset O&M. It manages accounts and passwords in a centralized manner to simplify account management.

Security Control

Bastionhost supports fine-grained user permission assignment to allow different users to perform operations based on the permissions assigned to them. This helps implement security and access control based on the principle of least privilege. In addition, unauthorized and high-risk operations are blocked to protect asset security.

Ease of Use

You can activate the service with a few clicks, dynamically upgrade service specifications, and manage assets in different environments such as data centers and heterogeneous clouds in a centralized manner. The service allows you to synchronize assets such as ECS instances and databases with a few clicks. It also supports different types of O&M users, including local users, RAM users, and AD-authenticated or LDAP-authenticated users.

Enterprise Dual-engine Edition: offers enterprise-level features and resource configurations.

This edition can meet various requirements of enterprises. Compared with other editions, it provides more diversified features, a more stable architecture with two engines, and a better O&M experience.

Benefits of Features

Database O&M and Management

- Supports O&M and management for not only assets in Linux and Windows but also databases.

Centralized O&M in Hybrid Scenarios

- Allows you to implement centralized O&M in scenarios that involve different types of complex assets, such as assets in data centers, assets in heterogeneous clouds, and cross-account assets.

Web Page O&M

- Provides a convenient O&M manner that allows you to perform O&M operations by using a web terminal without the need to install a client.

Benefits of Architecture

Dual-engine-based SLA

- Adopts a dual-engine architecture and offers an SLA that ensures high service stability based on the architecture.

Enterprise-level Resource Configurations

- Provides sufficient bandwidth and storage capacity that cater to enterprise-level business volume, improves the O&M of enterprise databases, and ensures high performance.

Scenarios

You may deploy your complex business across clouds or data centers, have multiple types of assets such as assets in Linux and Windows and databases, or require frequent O&M operations and advanced monitoring capabilities. If this is the case, Enterprise Dual-engine Edition is a good choice. This edition provides diversified O&M features and adopts a dual-engine architecture. It ensures high stability, smoothness of business O&M, and continuity of O&M audit in real time.

Features

Centralized Management

Manages different accounts in a centralized manner. You can access a huge number of server resources at the backend with single sign-on to Bastionhost. This improves your O&M efficiency and helps you avoid risks, such as difficulties in remembering different resource access accounts and passwords and leak-prone password information that many people know.

Identity Authentication

Provides the two-factor authentication feature. This feature sends a one-time passcode or an SMS verification code during the user logon to verify the identity of the user. This prevents third parties from accessing assets with the accounts and passwords that they steal.

Permission Assignment

Assigns fine-grained permissions to user groups, such as the file upload, download, and creation permissions. This helps implement security and access control based on the principle of least privilege.

High-risk Command Blocking

Automatically blocks high-risk commands that are run to perform highly sensitive operations, such as deleting data (rm -rf /*) and formatting system disks. This helps prevent accidental operations that may cause serious consequences.

Audit and Backtracking

Provides visual audit records. Bastionhost records and broadcasts O&M sessions to reproduce the whole operation process. This helps efficiently collect evidence and track security events.

Without/With Bastionhost

• Messy O&M entrance • Difficult management • Hard to identify who shall be liable for accidents that occur

• Unified entrance • Centralized management • Convenient O&M audit

Product Launch - Alibaba Cloud Bastionhost for FinTech

View Now

Quick Start

1

Synchronize Assets

Synchronize assets such as ECS instances for O&M.
Learn More

2

Import Users

Import user accounts such as RAM users for O&M.
Learn More

3

Authorize Users

Create an authorization connection between users and assets and create O&M rules.
Learn More

4

Perform O&M on Assets

Use Bastionhost to perform O&M on assets.
Learn More

5

Audit Sessions

Audit O&M operations in real time.
Learn More

Scenarios

Financial Industry
Internet Industry

Financial Industry

Due to business importance and data sensitivity in the financial industry, security monitoring of O&M operations on server assets needs to be strengthened. This prevents data leaks caused by unauthorized access during the O&M and breakdown of business systems caused by the execution of high-risk commands.

Solution

Bastionhost supports fine-grained permission assignment to prevent sensitive data vulnerabilities caused by unauthorized operations. It blocks high-risk commands in real time to ensure high security of business systems during the O&M. In addition, it assists in auditing all the operations by playing O&M sessions. This facilitates the backtracking of security events.

Internet Industry

As the Internet is growing rapidly, Internet-based enterprises have a large number of server resources and diversified information about employees and accounts. This may result in disordered access, difficult account management, and complex permission assignment.

Solution

Bastionhost provides a centralized portal for account management. You can access a huge number of server resources at the backend with single sign-on to Bastionhost. This improves your O&M efficiency and helps you avoid risks, such as difficulties in remembering different resource access accounts and passwords and leak-prone password information that many people know. You can also maximize the fine-grained permission management capability of Bastionhost to streamline management.

{"moduleinfo":{"title":"Pricing","des":"References: We recommend that you select the specifications based on a reasonable estimate of the maximum numbers of your assets and concurrent sessions. Bastion hosts of different specifications have the same features. Assets: the number of server assets that Bastionhost can manage. Concurrent Sessions: the number of O&M sessions that O&M personnel can initiate in Bastionhost. O&M sessions refer to SSH- and RDP-based remote connections. Assume 20 O&M personnel. Each of them initiates five sessions on average. A total of 100 concurrent sessions are created. This example is only for reference. The actual number of concurrent sessions must be calculated based on specific conditions. Example: An enterprise has 50 assets and 100 concurrent sessions. Another enterprise has 80 assets and 50 concurrent sessions. The minimum specifications for both of these enterprises are 100 assets and 100 concurrent sessions.","width":"small"},"head":[{"text":"Edition","row":"1","col":"1"},{"text":"Assets","row":"1","col":"1"},{"text":"Concurrent Sessions","row":"1","col":"1"},{"text":"Product Specifications","row":"1","col":"1"},{"text":"Price Per Month (USD) ：China (Hong Kong),Singapore,Australia (Sydney),Malaysia (Kuala Lumpur),Indonesia (Jakarta),Japan (Tokyo),Germany (Frankfurt),UK (London),US (Virginia),US (Silicon Valley),India (Mumbai)","row":"1","col":"1"},{"text":"Price Per Month (USD) : Shanghai, Shenzhen, Qingdao, Beijing, Hohhot, Chengdu","row":"1","col":"1"},{"text":"Price Per Month (USD) ：UAE (Dubai)","row":"1","col":"1"},{"text":"Billing Cycle","row":"1","col":"1"}],"list":[{"cell":[{"text":"Basic Edition","style":"text","row":"4","col":"1"},{"text":"50","row":"1","col":"1","style":"text"},{"text":"50","row":"1","col":"1","style":"text"},{"text":"Internet Bandwidth 8 Mbit/s + Storage 1T","row":"3","col":"1","style":"text"},{"style":"text","text":"400 USD","col":"1","row":"1"},{"text":"250 USD","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"750 USD"},{"style":"text","row":"11","col":"1","text":"Supported billing cycles: One month, three months, and six months One year, two years, and three years"}]},{"cell":[{"text":"100","row":"1","col":"1","style":"text"},{"text":"100","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"600 USD"},{"style":"text","text":"400 USD","row":"1","col":"1"},{"text":"1,000 USD","row":"1","col":"1","style":"text"}]},{"cell":[{"text":"200","row":"1","col":"1","style":"text"},{"text":"100","row":"1","col":"1","style":"text"},{"style":"text","text":"700 USD","row":"1","col":"1"},{"style":"text","text":"550 USD","row":"1","col":"1"},{"text":"1,300 USD","row":"1","col":"1","style":"text"}]},{"cell":[{"text":"500","row":"1","col":"1","style":"text"},{"text":"500","row":"1","col":"1","style":"text"},{"style":"text","text":"Internet Bandwidth 16 Mbit/s + Storage 2T","row":"1","col":"1"},{"style":"text","text":"1,100 USD","row":"1","col":"1"},{"style":"text","row":"1","col":"1","text":"800 USD"},{"text":"2,000 USD","row":"1","col":"1","style":"text"}]},{"cell":[{"text":"Enterprise Edition","row":"7","col":"1","style":"text"},{"text":"50","row":"1","col":"1","style":"text"},{"text":"50","row":"1","col":"1","style":"text"},{"text":"Internet Bandwidth 8 Mbit/s + Storage 1T","row":"3","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"700 USD"},{"style":"text","text":"400 USD","row":"1","col":"1"},{"style":"text","text":"--","row":"1","col":"1"}]},{"cell":[{"text":"100","row":"1","col":"1","style":"text"},{"text":"100","row":"1","col":"1","style":"text"},{"text":"1,000 USD","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"700 USD"},{"style":"text","row":"1","col":"1","text":"--"}]},{"cell":[{"text":"200","row":"1","col":"1","style":"text"},{"text":"100","row":"1","col":"1","style":"text"},{"text":"1,300 USD","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"950 USD"},{"style":"text","row":"1","col":"1","text":"--"}]},{"cell":[{"text":"500","row":"1","col":"1","style":"text"},{"text":"500","row":"1","col":"1","style":"text"},{"style":"text","text":"Internet Bandwidth 16 Mbit/s + Storage 2T","row":"3","col":"1"},{"text":"1,900 USD","style":"text","row":"1","col":"1"},{"style":"text","row":"1","col":"1","text":"1,400 USD"},{"style":"text","row":"1","col":"1","text":"--"}]},{"cell":[{"text":"1,000","row":"1","col":"1","style":"text"},{"text":"1,000","row":"1","col":"1","style":"text"},{"text":"3,900 USD","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"2,500 USD"},{"style":"text","row":"1","col":"1","text":"--"}]},{"cell":[{"text":"2,000","row":"1","col":"1","style":"text"},{"text":"1,000","row":"1","col":"1","style":"text"},{"text":"6,000 USD","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"4,000 USD"},{"style":"text","row":"1","col":"1","text":"--"}]},{"cell":[{"text":"5,000","row":"1","col":"1","style":"text"},{"text":"2,000","row":"1","col":"1","style":"text"},{"text":"Internet Bandwidth 32 Mbit/s + Storage 2T","row":"1","col":"1","style":"text"},{"text":"8,800 USD","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"5,800 USD"},{"style":"text","row":"1","col":"1","text":"--"}]}],"$root":{"moduleinfo":{"title":"Pricing","des":"References: We recommend that you select the specifications based on a reasonable estimate of the maximum numbers of your assets and concurrent sessions. Bastion hosts of different specifications have the same features. Assets: the number of server assets that Bastionhost can manage. Concurrent Sessions: the number of O&M sessions that O&M personnel can initiate in Bastionhost. O&M sessions refer to SSH- and RDP-based remote connections. Assume 20 O&M personnel. Each of them initiates five sessions on average. A total of 100 concurrent sessions are created. This example is only for reference. The actual number of concurrent sessions must be calculated based on specific conditions. Example: An enterprise has 50 assets and 100 concurrent sessions. Another enterprise has 80 assets and 50 concurrent sessions. The minimum specifications for both of these enterprises are 100 assets and 100 concurrent sessions.","width":"small"},"head":[{"text":"Edition","row":"1","col":"1"},{"text":"Assets","row":"1","col":"1"},{"text":"Concurrent Sessions","row":"1","col":"1"},{"text":"Product Specifications","row":"1","col":"1"},{"text":"Price Per Month (USD) ：China (Hong Kong),Singapore,Australia (Sydney),Malaysia (Kuala Lumpur),Indonesia (Jakarta),Japan (Tokyo),Germany (Frankfurt),UK (London),US (Virginia),US (Silicon Valley),India (Mumbai)","row":"1","col":"1"},{"text":"Price Per Month (USD) : Shanghai, Shenzhen, Qingdao, Beijing, Hohhot, Chengdu","row":"1","col":"1"},{"text":"Price Per Month (USD) ：UAE (Dubai)","row":"1","col":"1"},{"text":"Billing Cycle","row":"1","col":"1"}],"list":[{"cell":[{"text":"Basic Edition","style":"text","row":"4","col":"1"},{"text":"50","row":"1","col":"1","style":"text"},{"text":"50","row":"1","col":"1","style":"text"},{"text":"Internet Bandwidth 8 Mbit/s + Storage 1T","row":"3","col":"1","style":"text"},{"style":"text","text":"400 USD","col":"1","row":"1"},{"text":"250 USD","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"750 USD"},{"style":"text","row":"11","col":"1","text":"Supported billing cycles: One month, three months, and six months One year, two years, and three years"}]},{"cell":[{"text":"100","row":"1","col":"1","style":"text"},{"text":"100","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"600 USD"},{"style":"text","text":"400 USD","row":"1","col":"1"},{"text":"1,000 USD","row":"1","col":"1","style":"text"}]},{"cell":[{"text":"200","row":"1","col":"1","style":"text"},{"text":"100","row":"1","col":"1","style":"text"},{"style":"text","text":"700 USD","row":"1","col":"1"},{"style":"text","text":"550 USD","row":"1","col":"1"},{"text":"1,300 USD","row":"1","col":"1","style":"text"}]},{"cell":[{"text":"500","row":"1","col":"1","style":"text"},{"text":"500","row":"1","col":"1","style":"text"},{"style":"text","text":"Internet Bandwidth 16 Mbit/s + Storage 2T","row":"1","col":"1"},{"style":"text","text":"1,100 USD","row":"1","col":"1"},{"style":"text","row":"1","col":"1","text":"800 USD"},{"text":"2,000 USD","row":"1","col":"1","style":"text"}]},{"cell":[{"text":"Enterprise Edition","row":"7","col":"1","style":"text"},{"text":"50","row":"1","col":"1","style":"text"},{"text":"50","row":"1","col":"1","style":"text"},{"text":"Internet Bandwidth 8 Mbit/s + Storage 1T","row":"3","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"700 USD"},{"style":"text","text":"400 USD","row":"1","col":"1"},{"style":"text","text":"--","row":"1","col":"1"}]},{"cell":[{"text":"100","row":"1","col":"1","style":"text"},{"text":"100","row":"1","col":"1","style":"text"},{"text":"1,000 USD","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"700 USD"},{"style":"text","row":"1","col":"1","text":"--"}]},{"cell":[{"text":"200","row":"1","col":"1","style":"text"},{"text":"100","row":"1","col":"1","style":"text"},{"text":"1,300 USD","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"950 USD"},{"style":"text","row":"1","col":"1","text":"--"}]},{"cell":[{"text":"500","row":"1","col":"1","style":"text"},{"text":"500","row":"1","col":"1","style":"text"},{"style":"text","text":"Internet Bandwidth 16 Mbit/s + Storage 2T","row":"3","col":"1"},{"text":"1,900 USD","style":"text","row":"1","col":"1"},{"style":"text","row":"1","col":"1","text":"1,400 USD"},{"style":"text","row":"1","col":"1","text":"--"}]},{"cell":[{"text":"1,000","row":"1","col":"1","style":"text"},{"text":"1,000","row":"1","col":"1","style":"text"},{"text":"3,900 USD","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"2,500 USD"},{"style":"text","row":"1","col":"1","text":"--"}]},{"cell":[{"text":"2,000","row":"1","col":"1","style":"text"},{"text":"1,000","row":"1","col":"1","style":"text"},{"text":"6,000 USD","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"4,000 USD"},{"style":"text","row":"1","col":"1","text":"--"}]},{"cell":[{"text":"5,000","row":"1","col":"1","style":"text"},{"text":"2,000","row":"1","col":"1","style":"text"},{"text":"Internet Bandwidth 32 Mbit/s + Storage 2T","row":"1","col":"1","style":"text"},{"text":"8,800 USD","row":"1","col":"1","style":"text"},{"style":"text","row":"1","col":"1","text":"5,800 USD"},{"style":"text","row":"1","col":"1","text":"--"}]}]},"$moduleId":"5176818820"}

Pricing

References: We recommend that you select the specifications based on a reasonable estimate of the maximum numbers of your assets and concurrent sessions. Bastion hosts of different specifications have the same features.
Assets: the number of server assets that Bastionhost can manage.
Concurrent Sessions: the number of O&M sessions that O&M personnel can initiate in Bastionhost. O&M sessions refer to SSH- and RDP-based remote connections. Assume 20 O&M personnel. Each of them initiates five sessions on average. A total of 100 concurrent sessions are created. This example is only for reference. The actual number of concurrent sessions must be calculated based on specific conditions.
Example: An enterprise has 50 assets and 100 concurrent sessions. Another enterprise has 80 assets and 50 concurrent sessions. The minimum specifications for both of these enterprises are 100 assets and 100 concurrent sessions.

Edition	Assets	Concurrent Sessions	Product Specifications	Price Per Month (USD) ：China (Hong Kong),Singapore,Australia (Sydney),Malaysia (Kuala Lumpur),Indonesia (Jakarta),Japan (Tokyo),Germany (Frankfurt),UK (London),US (Virginia),US (Silicon Valley),India (Mumbai)	Price Per Month (USD) : Shanghai, Shenzhen, Qingdao, Beijing, Hohhot, Chengdu	Price Per Month (USD) ：UAE (Dubai)	Billing Cycle
Basic Edition	50	50	Internet Bandwidth 8 Mbit/s + Storage 1T	400 USD	250 USD	750 USD	Supported billing cycles: One month, three months, and six months One year, two years, and three years
	100	100		600 USD	400 USD	1,000 USD
	200	100		700 USD	550 USD	1,300 USD
	500	500	Internet Bandwidth 16 Mbit/s + Storage 2T	1,100 USD	800 USD	2,000 USD
Enterprise Edition	50	50	Internet Bandwidth 8 Mbit/s + Storage 1T	700 USD	400 USD	--
	100	100		1,000 USD	700 USD	--
	200	100		1,300 USD	950 USD	--
	500	500	Internet Bandwidth 16 Mbit/s + Storage 2T	1,900 USD	1,400 USD	--
	1,000	1,000		3,900 USD	2,500 USD	--
	2,000	1,000		6,000 USD	4,000 USD	--
	5,000	2,000	Internet Bandwidth 32 Mbit/s + Storage 2T	8,800 USD	5,800 USD	--

Start Your Efficient and Secure O&M Channel Now

Learn More

Documentation

Bastionhost

A unified, efficient, and secure platform that provides cloud-based O&M, access control, and operation audit.

Efficient and Secure O&M

Efficient O&M

Security Control

Ease of Use

Enterprise Dual-engine Edition: offers enterprise-level features and resource configurations.

This edition can meet various requirements of enterprises. Compared with other editions, it provides more diversified features, a more stable architecture with two engines, and a better O&M experience.

Benefits of Features

Benefits of Architecture

Scenarios

Features

Centralized Management

Identity Authentication

Permission Assignment

High-risk Command Blocking

Audit and Backtracking

Without/With Bastionhost

Product Launch - Alibaba Cloud Bastionhost for FinTech

Quick Start

1

Synchronize Assets

2

Import Users

3

Authorize Users

4

Perform O&M on Assets

5

Audit Sessions

Scenarios

Financial Industry

Solution

Internet Industry

Solution

Pricing

Upgraded Support For You

1 on 1 Presale Consultation

24/7 Technical Support

6 Free Tickets per Quarter

Faster Response

Start Your Efficient and Secure O&M Channel Now

Learn More

Sales Support

Technical Support

Connect & Report Abuse