Secure Remote Access with NetSupport Manager
Keys, passwords and encryption
The NetSupport Gateway
Two Factor Authentication
Identify and access
Data protection and privacy
Management and session logs
Keep remote access secure and under your organisation’s control. NetSupport Manager combines on-premises remote support with 256-bit AES encryption, two-factor authentication, SSL/TLS certificates, Active Directory integration, user acknowledgement and detailed activity logging to help protect every remote connection.
With the NetSupport Gateway hosted on-premises or in your private cloud, organisations can securely support users and devices without relying on a third-party hosted remote access service.
View pdf of security features
Keys, passwords and encryption
Security key. This makes your licensed copy of NetSupport Manager unique to your organisation and non-compatible with other copies of the software. The Control users can connect only if they have the same security key as the Client. It can be set as your serial number, unique to your organisation or as a secure passcode, depending on your preferences.
Data encryption with configurable options with up to 256-bit AES encryption.
SSL/TLS certificates allow for superior data security. Customers can enter their own certificate or allow the Gateway to create and use a Let’s Encrypt certificate.
The NetSupport Gateway
The NetSupport Gateway can be hosted within your organisation’s own infrastructure or private cloud, providing secure remote connectivity without routing sessions through a third-party hosted service.
The Gateway provides “keys” which serve as encrypted passcodes. These must match in order for connections between machines to be permitted. The gateway also logs all activity, making it easier to trace which computers were attempting to connect.
Two-Factor Authentication
Two-factor authentication (2FA) is available for operators connecting to the Gateway to start a remote connection. This extra layer of security uses time-based OTP (TOTP) or Duo Push to authenticate the operator for up to 12 hours. Also supports RADIUS authentication.
Identify and access control
User acknowledgement. The user must be present and authorise each inbound connection request.
Integrations. NetSupport Manager integrates with existing NT user profiles to validate an inbound user before a connection request is accepted. You can integrate directly with Active Directory profiles for user validation and use the Active Directory templates supplied to enable system-wide compliance with pre-defined client configurations.
Profiled functionality enables different functionality to be available depending on the authenticated user making a connection.
Timeouts. User-defined inactivity timeout on open connections and auto logout of a remote system on disconnect (avoids a system being mistakenly left in a logged-in state).
Smartcard authentication. Use a Smartcard PIN as well as the existing remote login support to support user validation. Any login performed on the Control PC is redirected and applied on the Client PC.
IP and name changes. If the name of the Client executable changes, it will be prevented from running to help combat and protect against exploits and malware – a handy feature to ensure no untoward activity is taking place. Plus, limit connectivity by user account or originating IP address and control HTTP access based on the IP address (only allow connections from known locations).
Data protection and user privacy
The Client log file can be edited to only show selected information to further support data protection, e.g., to protect personal data such as usernames when receiving support. You can also clear Client log files older than “x” days, if required.
Plus, blank the client’s screen when performing confidential actions.
Remote access auditing and session logs
- Centrally deploy and manage security configurations from a single location.
- Full event and history logs, including integration with OS event logs.
- Record and replay remote control sessions to keep a history of all activity during a session.
