In our company, we have recognized a growing inclination to discontinue the use of RUT, as it does not meet specific essential requirements for application in our industrial automation environment that operates on networks isolated fr om the internet. Below, we outline some features that could change our decision regarding the use of RUT in our organization.
1. Centralized Connection through the RUT Server:
Feature: Create a "proxy" or "relay" mode in which all communication between the Viewer and the Host is routed through the RUT Server.
Benefits: This ensures a centralized audit trail and the ability to record all sessions. This is crucial for companies that have strict compliance policies or need to maintain records of all remote access activities.
2. Hybrid Authentication:
Feature: Two-step authentication wh ere the first step authenticates the user on the RUT Server using Windows domain credentials, and the second step, between the RUT Server and Host, uses the corresponding RUT Server credentials of the user.
Benefits: This allows the company to maintain the security of its Viewer users using corporate standards (Windows domain), while still being able to access hosts that are outside the domain. This flexibility is vital in complex or heterogeneous environments.
3. Centralized Management of Host Configurations:
Feature: A dashboard or control panel on the RUT Server that allows administrators to configure, in bulk, the settings of the Hosts. Hosts could be grouped by department, location, or any other relevant criterion.
Benefits: Facilitates the management of large numbers of Hosts, allowing for bulk configuration changes. Additionally, it helps maintain consistency in policies and settings across Hosts.
4. Permission Request Based on User or Group:
Feature: Setting on the RUT Server that requires certain users or groups to request permission before accessing a Host.
Benefits: Increases security by ensuring that only authorized individuals can initiate remote access sessions without permission. This is especially useful in environments where data privacy or security is paramount.
