Guacamole's engine, inside a complete access product.
GSR Access Gateway uses Apache Guacamole's guacd for remote desktops. Around it we built what teams otherwise assemble themselves: a credential vault, access rules, recording that's always on, accountable sharing, command policy and an audit trail.
Where Guacamole is strong
free and open source (Apache 2.0), a mature protocol engine (SSH, RDP, VNC, Telnet, Kubernetes), a wide range of auth extensions (OIDC, SAML, LDAP, TOTP/Duo), and in-browser replay of graphical recordings with key-event search (1.6). [G1][G2][G8][G12]
| Apache Guacamole 1.6 | GSR Access Gateway | |
|---|---|---|
| Browser SSH / RDP / Telnet | Yes [G4] | Yes |
| VNC | Yes [G4] | Yes |
| Session recording | Per connection, off unless configured [G4][G14] | Every session, always on |
| Terminal replay in the browser | Graphical recordings; text typescripts can't be played in the browser [G14] | Text replay of terminal sessions in the browser |
| Search across sessions | Key-event search within a graphical recording (1.6) [G8] | Full-text search across all sessions: commands, output, queries, typed text |
| Recording integrity | Not documented | Sealed at session end (HMAC-SHA256), verified on open |
| Live sharing | Share links, usable without an account, valid until the sharer disconnects [G10] | Signed-in guests only, input attributed, full control needs the guest's own access, optional expiry |
| Credential storage | Connection parameters, or Keeper Secrets Manager for vault-backed injection [G6] | Built-in AES-256-GCM vault with rotation, or your external vault |
| SSH host verification | Optional host-key; "by default, Guacamole does not do any verification of host identity" [G4] | Pinned on first connect or up front, mismatch refused |
| Command blocking | Not documented | Block or alert, system-wide or per host |
| Legacy encodings / RTL | Not documented (SSH locale only) [G4][G9][G9][G9] | 50 encodings, right-to-left display |
| Admin console & access rules | Connection and user management [G3] | Hosts, users, SSO, access matrix with effective-access preview, policy, backup |
| Commercial support | Community mailing lists; third-party providers listed [G13] | Direct from GSR, with response-time tiers |
Spotted something out of date? Tell us and we'll fix it.
Prove it on your own systems.
A proof of concept runs inside your environment, on the systems you choose, with success criteria agreed up front.
- 01Scope call
- 02Deploy & connect your systems
- 03Review the evidence together
Apache Guacamole is a trademark of the Apache Software Foundation. Keeper and Teleport are trademarks of their respective owners. GSR is not affiliated with them.