The basics of the Bastion offer
Cloud Temple's Bastion service provides a secure, centralised point of entry for accessing sensitive resources in your cloud infrastructure. This solution offers secure RDP and SSH connectivity to your physical and virtual infrastructures, whether they are located in the trusted cloud, in a public cloud or on-premises. Bastion guarantees full traceability of actions for audit and compliance purposes. Systematic video recording of all sessions will soon be available.
Our compliance procedures
Our Bastion offering is HDS and ISO 27001 certified. This functionality is included in SecNumCloud-qualified and C5-compliant services.
The benefits of Cloud Temple's Bastion offering
Enhanced safety
A single point of entry to protect against attacks. Traceability is also a key feature, as all sessions are recorded and audited.
Centralised access
Unified management from the Cloud Temple console.
Infrastructure as Code management
APIs for complete automation.
Flexible access
Multi-environment support (cloud, on-premise).
The key features of our Bastion
RDP/SSH access
Secure connectivity to equipment
Session recording
H264 video capture of all sessions, securely stored and encoded on an Object Storage Cloud Temple.
*future functionality
50 IPs management
Up to 50 pieces of equipment per appliance
Full API
as Code“ equipment management
of streams
Protection of all communications
Detailed logs
Complete traceability of actions
Technical specifications
Need to secure your administration access? Let's talk about your project.
Would you like to implement a single point of entry for your infrastructures, guarantee full traceability of your RDP/SSH sessions or meet SecNumCloud requirements for your privileged accesses?
Our security experts will work with you to define the Bastion architecture best suited to your compliance and performance challenges. Whether you need to manage your internal administrators or control the activities of your service providers, we can help you build a trusted administration framework.
Pricing
| Infrastructure work units - BASTION | Unit | Unit price € excl. tax/month | Commitment |
|---|---|---|---|
| BASTION - Cloud Temple Appliance Bastion SSH & RDP - Recording H264 - 50 IPs | 1 appliances | 276,00 € | 1 month |
Use cases
The perfect balance between maximum safety and operational simplicity.
Unlike a simple SSH gateway or traditional VPN, Bastion Cloud Temple offers a layer of total isolation. It prevents any direct exposure of your servers to the Internet. Above all, it guarantees unalterable traceability: every action is logged and, in the near future, every session will be recorded on video (H264). This is an essential prerequisite for meeting the requirements of SecNumCloud qualification and the strictest compliance audits.
As soon as you manage sensitive infrastructures or third-party access.
The Bastion is essential in three key scenarios:
- Internal administration : For your deployment teams (DevOps, SysAdmin) accessing critical resources.
- Maintenance provider : Open up temporary, controlled access to external partners without compromising your network.
- Regulatory compliance : For the healthcare (HDS), finance or public sector sectors requiring a complete history of administration interventions.
A sovereign, managed solution with no exit costs.
The Bastion Cloud Temple is natively integrated into the Cloud Temple management console, while remaining a dedicated resource in your environment (strict logical isolation). Unlike global public cloud solutions, we guarantee data residency in France and total price transparency: the price is a flat rate per appliance, including API and logging functionalities, with no hidden charges on the volume of data passing through the gateway.
Self-service provisioning, ready in just a few minutes.
Deployment is fully automated via the Cloud Temple console or by API (Infrastructure as Code approach). Once the appliance has been instantiated, all you have to do is configure your network rules (opening flows to your target IPs). The intuitive interface lets you add your RDP or SSH devices straight away. Only the opening of flows on your firewalls remains in your hands to ensure that you retain ultimate control over what is accessible.
Systematic capture stored securely.
The recording of sessions will be non-rewritable to guarantee the integrity of the audit. Video streams will be encoded in real time in H264 and automatically transferred to your own Object Storage Cloud Temple (S3) bucket. This ensures that you retain ownership of your audit evidence, with the ability to define your own data retention policies.