A suite of tools for securely automating your routine file transfer, shell, and public-key administration tasks on a variety of Windows, Linux, and UNIX platforms. Secure automation increases compliance with security policies and practices.
The VanDyke ClientPack lets network managers deploy the automation tools of the VShell® server to other users. Save time on routine administration and configuration tasks, and implement security policies and procedures consistently.
The VanDyke ClientPack includes:
- VRALib, a COM and .NET API for scripting SSH2 connections
and the secure command-line utilities:
- vsftp, an interactive SFTP utility for quick, easy, file transfers
- vsh, an interactive shell utility
- vcp, a line-oriented file transfer utility
- vkeygen, a public/private key generator utility
vpka, a tool for uploading keys to the VShell server
Benefits
Use the VRALib COM interface to perform remote execution, file transfer and port forwarding tasks within your .NET application.
Scriptable command-line interfaces allow you to automate file transfer, shell, and public-key administration tasks with proven, open-standard security.
Create multi-platform automation solutions with consistent, repeatable results on Windows, Linux, and UNIX.
Employ the same trusted Secure Shell encryption libraries and authentication choices found in SecureCRT® and SecureFX®.
New in VanDyke ClientPack 6.5
Automate SSH2 sessions (Windows only) The VRALib API allows scripting of SSH2 connections through a Windows COM interface. Supported operations include full control over SSH2 connections, sending a command to an SSH2 server and getting the output produced by the command, tunneling/port forwarding, file transfers using SFTP, remote file management, adding host keys to a host key database, and adding keys to the SSH2 authentication agent.
Move files Moving files is supported in vcp and vsftp using --move. In vsftp, --move can be specified as an argument to get and put.
"No preserve" option vsftp has a --nopreserve flag that specifies that timestamps and permissions should not be preserved.
Unauthenticated HTTP proxies An unauthenticated proxy to be used during connection can be specified in vcp, vsftp, and vsh.
CAPI encryption (Windows only) Microsoft CAPI encryption is supported in vkeygen during key generation and passphrase change operations.
Security
Authentication methods All the VanDyke ClientPack applications support password, public-key (RSA, DSA, and smart cards* using X.509), Kerberos v5 (via GSSAPI), and keyboard-interactive when connecting to SSH2 servers. vsh supports connections to SSH1 servers using password, public-key, and TIS authentications.
* Windows only
Encryption ciphers The VanDyke ClientPack applications support AES-128, AES-192, AES-256, Twofish, Blowfish, 3DES, and RC4 ciphers when connecting to SSH2 servers. The maximum 2048-bit length of DSA keys under SSH2 provides more secure encryption. For SSH1 servers, Blowfish, DES, 3DES, and RC4 and are supported.
SFTP protocol support vcp and vsftp support SFTP through version 6.
FIPS 140-2 (Windows only) The VanDyke ClientPack for Windows has an administrative option to run in "FIPS Mode". When this option is set, the VanDyke ClientPack applications use a FIPS 140-2 validated cryptographic library and only allow FIPS-approved algorithms.
SSH Agent support Agent forwarding support allows transparent authentication to multiple linked servers after the first SSH server has authenticated the user.
Port forwarding vsh allows you to tunnel common TCP/IP protocols (for example, POP3, IMAP4, HTTP, SMTP) to a remote Secure Shell server using a single, secure, multiplexed connection.
Dynamic port forwarding vsh provides dynamic port forwarding which simplifies how TCP/IP application data is routed through the Secure Shell connection. Instead of configuring port forwarding on a per-application basis in vsh, each application is configured to use a SOCKS server on a local host port. vsh opens a port on the local host and acts as a SOCKS server for any SOCKS-compatible application, even those that use multiple ports, such as FTP.
X11 forwarding vsh allows you to encrypt X11 Windows sessions to secure remote X applications that are being displayed on the local PC.
Remote execution Like rsh, vsh can be used to execute commands on a remote system. But unlike rsh, vsh provides secure encrypted communications over a nonsecure network.
SSH1 support Both SSH1 and SSH2 are supported in vsh, providing the maximum in flexibility when connecting to a range of remote servers.
Create public/private keys vkeygen is a program that generates public and private keys with options to set the key length (in bits) and passphrase associated with the key pair. Microsoft CAPI encryption is also supported during key generation and passphrase change.
Upload and manage keys vpka is a public-key assistant program which allows a user with no public key file on the server to upload a public key for use in authentication. vpka can also be used to define parameters for keys and to remove keys from the server.
Firewall Support for SOCKS v4 and v5 and unauthenticated HTTP proxies.
File transfer (vcp and vsftp)
Create directories vsftp can be used to create new directories locally and on the remote host.
Rename files vsftp can be used to rename files locally and on the remote host.
Set permissions vsftp can be used to change read/write/execute permissions as allowed by logon. It can be used to specify file permissions for uploaded files.
List files vsftp can be used to display the remote directory listing of either the path or of the current directory if the path is not specified. If the -l flag is set, vsftp displays permission and ownership information. This command, if used with a / (i.e., ls /), lists the roots when connecting to a server such as VShell that allows multiple roots.
Recursive operations Both vsftp and vcp commands can be recursively applied to all subdirectories in a target directory.
Move files Moving files is supported in vcp and vsftp using -- move. In vsftp, --move can be specified as an argument to get and put.
Wildcard matching Both vsftp and vcp commands can specify a path that contains the wildcard characters * and ?. vsftp will expand these wildcard characters. Multiple wildcard characters are permitted in a path (e.g., "*.*" or "*.?"). vsftp also supports file "globbing". The sequence [...] will match any one of the characters enclosed. Within [...], a pair of characters separated by a quotation mark (") matches any character lexically between the two. The backslash can be used to turn off wildcard characters (e.g., \* or \[).
ASCII/Binary file transfers vsftp supports both ASCII and binary file transfers. Text format files can be sent as raw text rather than in binary format for more compatible transfers of files like HTML and server logs between different operating systems.
Progress indicator Both vsftp and vcp illustrate the status of a file transfer operation with a text-based progress indicator.
Remote to remote Copies between two remote hosts can be accomplished using vcp. File sources and destinations may contain a user, host, and port specification to indicate that the file is to be copied to or from that host.
Other Features
Firewall support The VanDyke ClientPack applications support both SOCKS v4 and v5 for use with SSH1 or SSH2. When using SOCKS v5, optional firewall authentication is supported.
Windows and UNIX support The VanDyke ClientPack is available for Windows 7, Vista, 2003, and XP for x86 and x64, and Windows 2000, Red Hat Enterprise 5.0 and 4.0, Solaris 10 (SPARC) and Solaris 8 (SPARC), FreeBSD 7.0 and 6.1 (Intel x86), HP-UX 11, Mac OS X 10.5 (Intel x86) and Mac OS X 10.2 and AIX 5.3.
IPv6 The VanDyke ClientPack applications support the IPv6 standard being implemented across the internet. IPv6 addresses limitations with the current IPv4 standard, such as the limited number of available IPv4 addresses. It also adds many improvements to IPv4 in areas such as routing and network autoconfiguration.
Microsoft® Windows® 7
Windows Vista®
Windows 2003
Windows XP
Windows 2000
Microsoft Internet Explorer 5.5 or later
Note: 64-bit editions of the above platforms are supported, other than Windows 2000.
