GateKeeper Hub Offsite Access for admins explained.

What is GateKeeper Hub Offsite Access?

GateKeeper Hub Offsite Access (for on-site GateKeeper Hub version only) is a reverse proxy mechanism which allows admins to access the on-premise GateKeeper Hub web application (running on the local network) over the Internet from outside of the local network.

The GateKeeper Hub serves as the on-site browser-based access management tool for the GateKeeper Enterprise identity and access control solution. In cases where a managed service provider or an IT administrator needs to access their organization’s GateKeeper Hub website while they are not connected to the on-premise network (off-site), they must create a VPN tunnel from their computer to the on-premise network. With the GateKeeper Hub Offsite Access service, the GateKeeper Hub web application can be made available through the Internet without the need to connect to the on-premise network using VPN. This allows for easier management of the GateKeeper Enterprise solution while the administrator is not connected to the on-premise network.

How does GateKeeper Hub Offsite Access work?

GateKeeper Hub on-premise software enables the offsite access feature by creating a secure tunnel from the on-premise GateKeeper Hub web application to a predetermined website that is accessible over the Internet. Once this secure tunnel is created, administrators can log in to their on-premise GateKeeper Hub web application by going to their chosen public website on any computer, even when they are not on the same on-premise network. The GateKeeper Hub Offsite Access tunnel allows the Hub administrator to create a new website (https://<PERSONALIZED_SUBDOMAIN>.gkchain.com), watches for requests on that URL, and then forwards those requests to the on-premise GateKeeper Hub web application.

What do you need to enable GateKeeper Hub Offsite Access?

The following are required to enable GateKeeper Hub Offsite Access.

1. GateKeeper Hub web application installed on the network (on-premise).
2. Active license for GateKeeper Enterprise.
3. Active license for GateKeeper Hub Offsite Access.

What is the setup process for GateKeeper Hub Offsite Access?

After purchasing a GateKeeper Hub Offsite Access license, the setup process is as follows:

1) Open GateKeeper Hub Manager and click Offsite Access.

     

2) Click the gear icon in the top right.

3) Click Install to establish a proxy service.

4) Choose a desired subdomain for your public website. Typically, you will choose your organization’s name as the subdomain. “.gkchain.com” will be appended automatically to your chosen subdomain to create the Hub website’s URL. Click Validate to reserve your URL. Please avoid choosing simple subdomains such as “test” or “gatekeeper”. Example of a good URL: gkchain.com.

 

5) Once the chosen URL has been validated, please click Save. Once saved, click Next to finish configuring the tunnel service for offsite access.

6) Click Start to initiate the tunnel. A pop-up confirming the successful creation of the tunnel and the public URL will be shown. Copy and paste the public URL to your web browser to access the GateKeeper Hub website over the Internet.

7) Once the tunnel has been started, you will be able to see metrics such as the number of open connections on the Offsite Access tab on the GateKeeper Hub Manager.

When should GateKeeper Hub Offsite Access be used?

GateKeeper Hub Offsite Access should be used in cases where a managed service provider or an IT administrator for an organization needs to access the GateKeeper Hub website while they are not connected to the on-premise network. With the GateKeeper Hub Offsite Access service, the GateKeeper Hub web application can be made available through the Internet without the need to connect to the on-premise network using VPN. This allows for easier management of the GateKeeper Enterprise solution while the administrator or the managed service provider is not connected to the on-premise network.

When will GateKeeper Hub Offsite Access not work and why?

Common reasons that the GateKeeper Hub Offsite Access feature may not work include:

1. GateKeeper Hub website is not working properly.
2. The proxy service (ngrok) on the machine where GateKeeper Hub is installed is not running properly.
3. Certain network traffic is blocked by your network administrators.

Is GateKeeper Hub Offsite Access a cloud service?

GateKeeper Hub Offsite Access is not a cloud service. All the data is stored in a SQL database on your on-premise network and not on any cloud servers. This process provides a simpler and quicker path for the on-premise GateKeeper Hub web application to be accessed at a public URL over the Internet. Network administrators can do the same thing without using GateKeeper Hub Offsite Access by opening the appropriate ports on their routers and firewalls and assigning a URL to their on-premise GateKeeper Hub web application using Internet Information Services (IIS). The GateKeeper Hub Offsite Access feature simplifies the process for the administrator and does not require any changes to the router or firewall configurations.

GateKeeper Hub Offsite Access use case.

Managed service providers (MSP) can benefit greatly from using the GateKeeper Hub Offsite Access feature. This feature allows MSPs to manage multiple GateKeeper Hub instances running at different customer locations. The service provider does not have to connect to their client’s network over a VPN in order to access the GateKeeper Hub web application. They can simply administer the GateKeeper Hub web application by logging in to the on-premise GateKeeper Hub via the public URL created during the GateKeeper Hub Offsite Access setup process. 

Additionally, GateKeeper Hub administrators can also benefit from the feature. For example, GateKeeper Hub administrators can respond to an employee’s request for resetting their PIN for their GateKeeper token from anywhere, without having to be connected to their office network.

This feature is beneficial for administrators working from home or travelling, and would like to access audit logs, add new users, generate reports, etc. from GateKeeper Hub.

Pricing for GateKeeper Hub Offsite Access.

The GateKeeper Hub Offsite Access subscription license can be purchased annually for $180 per GateKeeper Hub installation.

How do I get the GateKeeper Hub Offsite Access license?

Please contact [e-mail] to request the GateKeeper Hub Offsite Access license subscription.

For any additional questions or concerns regarding locking, logging off, proximity settings, credential management, or compliance, please contact GateKeeper Enterprise support using the Support Ticket form on https://gkaccess.com/support/ or email [e-mail]. Lock or log off automatically when you're away from your computer.

------------------------------------------

GateKeeper offline; GateKeeper offsite; logging into enterprise; gatekeeper hub offline access; access gatekeeper hub from anywhere in the world; access gatekeeper hub admin console from remote; remotely access gatekeeper hub; GateKeeper Hub server access from home; working from home with GateKeeper; access logs from home; add user from home; add token from home; add GateKeeper from home; using GateKeeper from home; working from home with GateKeeper; Hub access from home; hub access anytime; hub access anywhere; access hub from another network; GateKeeper Hub Offsite Access for explained.; What is GateKeeper Hub Offsite Access for admins?;