Products

Comparing SecurSH to OpenSSH

OpenSSH has several significant limitations on the NonStop platform. The following SecurSH features are not available with the OpenSSH port:

General
  • Does not require OSS
  • Optimzed performance (e.g. inter-process communication via Guardian IPC, not OSS sockets)
  • Robust solution proven in high-volume business-critical production environments
  • Professional product and implementation support

SSH daemon
  • password authentication (OpenSSH supports only public key authentication)
  • external userids mapped to guardian userids, allowing to keep guardian userids secret
  • Advanced auditing capabilities
  • Fault-tolerance (SSH server running as a nonstop process)
  • Pseudo-terminals supporting full screen applications such as vi or emacs.
  • Direct TACL command execution without requiring an OSS gtacl process
  • 6530 terminal support (with SSH clients supporting 6530 terminal emulation, such as MR-Win6530)

SSH client
  • Guardian SSH client
  • Optimized for batch mode (e.g. remote passwords can be stored in a secure password store, avoiding interactive password prompts)

File Transfer
  • Guardian SFTP client
  • seamless Guardian and OSS filesystem support OSS and Guardian SFTP, as well as SFTP server
  • ASCII mode file transfer
  • transfer from/to structured files (analogous to HP's FTP)
  • support of file create options, both for client and server (analogous to HP's FTP)
  • fine-grained access control, restricting individual users to specific Guardian file sets, OSS directories and specific operations (e.g. download only)
  • tunneling of standard FTP sessions over SSH (i.e. FTP port forwarding)