Grant employees, third-party providers, and external administrators controlled access to the systems they need.
VPNs grant network-level access when the requirement is system-level access, and third-party accounts are routinely over-privileged and rarely revoked. The attack surface grows with every supplier relationship — with little visibility into what external users actually do once connected.
Managing remote access at scale means managing VPN clients, firewall exceptions, jump servers, and credential distribution — for populations that change constantly. Onboarding a new provider takes days; offboarding is often forgotten entirely. Every access request lands on the IT team, and every exception becomes a standing configuration that nobody owns.
NIS2, DORA, ISO 27001, and sector-specific regulations increasingly require organisations to demonstrate who accessed which system, when, and what they did — including third parties. VPN logs show that a tunnel was established; they do not show what happened inside it. Without session-level traceability, external access remains an audit finding waiting to be written.
Shared accounts, password resets, connection troubleshooting for external users on unmanaged devices — remote access generates disproportionate operational load. Admins need to intervene on production systems from anywhere, including off-hours,
without carrying credentials or depending on a corporate laptop.
WALLIX Remote Access provides control and governance over remote access to corporate IT assets and infrastructure. Instead of extending the network to external users, it brokers each connection individually: users authenticate through a web portal, are granted access only to explicitly authorised targets, and every session is monitored and recorded.
RDP and SSH sessions delivered through a unified web portal — nothing to install, no VPN, any endpoint.
External providers are provisioned on demand, in a fully segregated directory — no third-party identities ever enter the corporate AD, while corporate security policies continue to apply.
Named users, explicit authorisations, multi-factor authentication at connection — OTP applications or FIDO security keys. OpenID federation fits existing IAM policies.
Every external session can be replayed and audited. Control and transparency over all third-party activity, aligned with national recommendations.
Software vendors, integrators, and hardware maintainers routinely require access to the systems they support. Remote Access confines each provider to their contracted scope, records every action, and makes offboarding a single revocation rather than a credential hunt.
Internal administrators intervene on servers, databases, and network equipment from outside the corporate network — including emergency off-hours response — through the same governed channel, with the same traceability.
When infrastructure operation is delegated to an MSP , the organisation retains control: it defines what the MSP can reach, monitors activity in real time, and holds a complete, independent audit record of every intervention.
Employees accessing critical internal applications and systems from home or unmanaged devices connect through the portal rather than the network — reducing the exposure created by personal endpoints without degrading productivity.
Dimension
Attack Surface
Access Scope
Credentials
Traceability
Onboarding
Offboarding
Compliance evidence
IT Workload
Without governed Remote Access
Attack Surface Open inbound ports, VPN concentrators, exposed RDP/SSH
Access Scope Network-level access; lateral movement possible
Credentials Shared or communicated to third parties
Traceability Tunnel logs only
Onboarding Days: VPN client, firewall rules, account creation
Offboarding Manual, frequently incomplete
Compliance evidence Reconstructed after the fact
IT Workload Every request handled centrally
With Secure Remote Access
Attack Surface No inbound exposure; connections brokered individually
Access Scope System-level access; least privilege enforced per user
Credentials Vaulted, rotated, injected — never disclosed
Traceability Full session recording, transcript, and metadata
Onboarding Email invitation, self-registration, delegated setup
Offboarding Single revocation; time-limited access expires automatically
Compliance evidence Available on demand, per session, per user
IT Workload Delegated administration and self-service
FAQs
A VPN extends the network to the user’s device: once connected, the user is inside the perimeter, and control depends on internal segmentation. WALLIX One Remote Access brokers each connection to a specific, authorised target through a web portal. There is no VPN to install and manage, no additional tickets for IT staff, and every external session can be replayed and audited.
No. RDP and SSH sessions are delivered through a unified web portal with integrated web clients. Third parties and remote employees connect from a standard browser, with nothing to install or maintain.
No passwords are shared. Each external user authenticates as a named individual with their own password and a second factor — an OTP application or a FIDO security key. Providers are provisioned Just-In-Time in a segregated directory, so no third-party identity ever enters the corporate AD.
A business manager with delegated administration registers the provider; the contractor is invited by email, registers their MFA device, and connects through the web portal to the resources assigned to them. Access can be subject to approval, and the approver can define the duration of the work assignment.
