Beyond the jump host.
VPNs and jump hosts give network access. GSR Access Gateway gives access to specific systems, with credentials kept in the gateway and every session recorded.
| Jump host + VPN | GSR Access Gateway | |
|---|---|---|
| What users can reach | The network segment behind the VPN | Only the systems they're granted |
| What users install | VPN client + SSH/RDP clients | A browser |
| Who holds credentials | Users (keys, passwords on laptops) | The gateway's encrypted vault |
| Session record | Whatever the jump host logs, if configured | Every session recorded, sealed and replayable |
| Live oversight | None built in | Share live, watch live, end with a reason |
| Offboarding | Revoke VPN, rotate shared passwords, clean keys | Disable the account; live sessions end within seconds |
NSA and CISA note that remote-access VPNs are entry points into protected networks and attractive targets [R1][R2]. NIST SP 800-207 calls for no implicit trust based on network location [R3].
The gateway covers administrative access to terminals and desktops, not general network traffic.
Spotted something out of date? Tell us and we'll fix it.
Prove it on your own systems.
A proof of concept runs inside your environment, on the systems you choose, with success criteria agreed up front.
- 01Scope call
- 02Deploy & connect your systems
- 03Review the evidence together
Apache Guacamole is a trademark of the Apache Software Foundation. Keeper and Teleport are trademarks of their respective owners. GSR is not affiliated with them.