next-terminal/next-terminal
Next Terminal
Next Terminal is an enterprise bastion host platform that brokers and audits remote access to servers and devices. It functions as a centralized gateway unifying access to Windows, Linux, and legacy systems through a single authenticated interface, supporting RDP, SSH, VNC, Telnet, and HTTP protocols.
The platform combines certificate management, policy-based access control, reverse tunnel agents, session recording, and web proxy interception into a unified security gateway. It deploys lightweight agents in internal networks that build reverse tunnels to a central site, eliminating per-location routing configuration, while checking user permissions against each requested resource before forwarding traffic. All remote session activity is captured and stored for later playback during security audits and compliance reviews.
The system provides a web-based admin interface for configuring access policies and reviewing session logs, with support for concurrent session scaling to handle hundreds of simultaneous connections. It includes credential-based authentication, certificate configuration management supporting self-signed and CA-issued certificates, and web application proxying that routes internal services through the security gateway.
Features
- Bastion Host Deployment - Runs a centralized gateway that brokers and audits remote access to servers via RDP, SSH, VNC, Telnet, and HTTP.
- Bastion Servers - An enterprise bastion host that brokers and audits remote access to servers via multiple protocols.
- User Session Recording - Captures and stores all user activity during remote sessions for later review and audit.
- Authenticated Web Service Proxies - Authenticates users before forwarding requests to internal web services through a security gateway.
- Remote Session Recorders - Captures keystrokes and screen output during remote sessions for later replay and security audit.
- Reverse Tunnel Gateway Deployments - Deploys lightweight agents in each internal network that build reverse tunnels to a central site.
- Bastion Host Protocol Multiplexers - Routes RDP, SSH, VNC, Telnet, and HTTP through a single bastion host that audits each connection.
- Multi-Protocol Remote Node Connectors - Connects to servers and devices through RDP, SSH, VNC, Telnet, and HTTP from a single unified interface.
- Multi-Protocol - A centralized gateway that unifies access to Windows, Linux, and legacy devices through a single authenticated interface.
- Agent-Based - Deploys lightweight agents in internal networks that build reverse tunnels to a central site.
- Agent-Based Reverse Tunnel Managers - Deploys lightweight agents in internal networks to build reverse tunnels, eliminating per-location routing configuration.
- Access Control Centralization - Manages user permissions and access rules for all remote resources from a unified system.
- Remote Access Permission Managers - Manages and audits access to servers via RDP, SSH, VNC, Telnet, and HTTP from a single bastion host.
- Policy-Based Access Control - Checks user permissions against each requested resource before forwarding traffic.
- Credential Authentications - Verifies user identity by accepting a username and password to grant system access.
- Secure Web Gateways - Routes all requests to internal web services through a security gateway that blocks unauthenticated traffic.
- Remote Session Audits - Captures and stores all keystrokes and screen output during remote sessions for audit review.
- Terminal Session Playback - Captures all remote session activity and allows playback for security auditing and compliance tracking.
- Authorized Request Forwarders - Checks user permissions against each requested resource after login and only forwards traffic when authorization succeeds.
- Concurrent Remote Session Managers - Allocates CPU and memory resources to support hundreds of simultaneous remote connections from a single gateway.
- RDP Session Brokers - Establishes remote desktop connections to Windows machines through the bastion host for centralized access.
- Authenticated Web Traffic Interceptors - Routes all requests to internal web services through a security gateway that blocks unauthenticated traffic before it reaches the target.
- Multi-Type Certificate Managers - Supports self-signed, CA-issued, and imported certificates for securing bastion host connections.
- HTTP Application Proxies - Proxies HTTP-based applications through the bastion host for web-based remote access.
- SSH Session Brokers - Opens secure shell sessions to Linux or Unix servers through the bastion host for command-line access.
- Admin Interfaces - Provides a web-based management dashboard for configuring access policies and reviewing session logs.
