Updated Date: 07/07/2026
Example: Proxy SSH traffic with an SSH Proxy profile
Configure an SSH proxy security profile to allow or deny SSH channel actions to specific users on a virtual server. In this example, the proxy profile disallows SCP uploads and downloads, and terminates the channel on REXEC commands for the root user. All data entered in this screen is example data, and may not work on your system.
-
On the Main tab, click Security > Protocol Security > Security Profiles > SSH Proxy.
The Protocol Security: Security Profiles: SSH Proxy screen opens.
-
Click Create.
The New SSH Profile screen opens.
-
In the Profile Name field, type the name
ssh_no_scp_terminate_rexec. -
Click Add New Rule to add a rule for the profile.
-
In the Enter Rule Name field, type
root_rulesas the name for the rule. -
In the Users column, in the add new user field, type
root, and click Add. -
From the SCP Up list, select Disallow.
-
From the SCP Down list, select Disallow.
-
From the REXEC list, select Terminate.
-
To enable logging for the SSH actions, select the Log check boxes.
-
Click Add Rule.
-
When you are finished adding and editing rules, click Commit Changes to System.
The SSH proxy profile is saved to the system.
To use an SSH proxy profile with a virtual server, attach the profile to a virtual server on the Properties page, in the Configuration (Basic) settings.