MeshCentral Remote Tool

Connect to your home or office devices from anywhere in the world using MeshCentral, the open source, remote monitoring and management server. Once installed, each enabled computer will show up in the "My Devices" section of the web site and will be able to perform remote desktop, remote terminal, file transfers and more.

Features

Remote Device Control
Cross-Platform Access
VPN Alternative
Secure Unattended Access
Wake Up, Restart, and Install

MeshCentral is a remote management tool that allows users to remotely access, control, and manage devices over the Internet. It is designed to be lightweight, easy to use, and secure, making it an ideal solution for businesses and organizations that need to remotely manage a large number of devices.

One of the main features of MeshCentral is the ability to remotely access and control devices. Users can connect to a device from any location using a web browser, allowing them to view the device's screen, control its mouse and keyboard, and access its files and applications. This can be especially useful for troubleshooting and support tasks, as it allows users to remotely diagnose and fix problems with a device.

MeshCentral also includes a range of security features to protect against unauthorized access. These include encryption, user authentication, and the ability to remotely lock and wipe a device if it is lost or stolen.

In addition to its remote management capabilities, MeshCentral also includes a range of tools for managing and organizing devices. Users can create groups and tags to organize devices, and can use the tool's inventory and reporting features to track the status and usage of their devices.

Overall, MeshCentral is a powerful and flexible remote management tool that is well-suited for businesses and organizations that need to remotely manage a large number of devices. Its combination of remote access, security, and management features make it an essential tool for IT professionals.

MeshCentral - 12 Tips & Tricks

MeshCentralManageability Features

MeshCentral was architected from the start with both security and easy of use in mind. This document highlights the security features present in MeshCentral that make is unique as an open source remote management server


Remote Desktop & Terminal. Possibly the most used feature, MeshCentral offers web based remote desktop and terminal. You can take control of any computer in the world from any web browser.

Real Time User Interface. The MeshCentral web interface is fully real-time so users nev-er have to hit “refresh”. This makes it easy to see device connections to and activities has they happen.

Remote File Access. Fully access files on any system remotely including download, up-load, rename, creating new folders and more. The storage of your own devices ac-cessible from anywhere.

Power State Monitor & Control. Trace when a device is powered on and use your existing live devices to send Wake-on-LAN commands on remote networks allowing remote device power management.

Text and Video Chat. While performing a remote support session, you can initiate a chat session with the remote user. If WebRTC is available, you can even perform a live audit and video chat

Port Forwarding. Use the router tool to map any local TCP or UDP ports on your local machine to ports on remote devices. Per-form RDP or SSH sessions to devices any-where on the Internet.

Multi-OS Support.The server is built on NodeJS and can be installed on any major operating system. The agent is build in C and has ports for 32 and 64bit Windows, Linux (x86 & ARM), MacOS and FreeBSD.

Multi-User. MeshCentral fully supports mul-ti-user and multitenancy permitting servers to be used by many people at once with different permissions on device groups for efficient server use.

Intel Active Management Technology.By optionally using Intel® AMT when available, administrators can remotely power on, boot to BIOS and manage a system regardless of the operating system state

Activity Logs.Trace what users are doing on remote devices with a real-time event log that can be filtered per device or per user. Perfect for auditing management operations.

Server File Storage.Use the server as a file store to upload, download and make files available for public access. Makes it easy to use your MeshCentral server as a cloud file storage server.

Session Recording. Remote desktop, termi-nal and Intel AMT KVM sessions can all op-tionally be recorded by the server for later playback adding an additional layer ofauditing capability.

MeshCentral Security Features

MeshCentral was architected from the start with both security and easy of use in mind. This document highlights the security features present in MeshCentral that make is unique as an open source remote management server.


Two Factor Authentication. Passwords are not sufficient to protect users anymore. With support for two factor authentication, remotely managed assets are better pro-tected against password disclosures.

HTTP Content Security. To secure against any possibility of unwanted cross-site scripting and other attacks, MeshCentral’s HTTP headers includes browser instructions to limit the source of content that is loaded.

Let’s Encrypt Support.With built-in support for Let’s Encrypt, MeshCentral can obtain a valid TLS certificate for the domain name and auto-renew the certificates making it easy to establish trust to users.

FIDO2 support. With built-in support for hardware authentication keys (Bluetooth, USB and NFC) administrator can setup an extra factor of authentication that defends against fishing attacks.

Strong Cryptography.By default, strong cryptography is used including SHA385, AES256 and RSA3072. This is a step above the industry and recommended good prac-tice for quantum computer resistance.

IP address token binding. All session tokens and cookies generated by MeshCentral are bound to the requester’s source IP address making it impossible for malware stolen tokens to be reused at a different location.

Use of TLS 1.3.Strong security includes use of strong cryptographic transport protocols. MeshCentral makes use of TLS 1.3 on it’s HTTPS port 443 and disables use of weaker generations of TLS on that port.

Reverse Proxy Support. By supporting re-verse proxies, MeshCentral can be installed in most modern data centers without having MeshCentral know the main HTTPS private certificate key.

Strong Password Enforcement.By optional-ly requiring that users make use of strong passwords and requiring use of two-factor authentication, user accounts security can be improved.

HashiCorp Vault Support.MeshCentral can be configured to retrieve and store all con-figurations settings and secrets in Vault, making the server stateless and adding an extra layer of protection.

Database Record Encryption.If enabled, MeshCentral will encrypt all sensitive fields before storing then in the database. This can be done in addition to database provid-ed encryption for extra security.

Strong Password Hashing.By default, MeshCentral account passwords are hashed using PBKDF2 with 12000 rounds of SHA384 and a 128 byte long salt providing security and dictionary attack resistance.
$59/mo



DEPLOY YOUR MESHCENTRAL

Contact
CIT Servers, LLC
P: (888) 217-7317 | support@citservers.com
A: 2111 Wilson Boulevard, Ste. 700,
Arlington, VA 22201