Listing Thumbnail

    Guacamole Bastion Host

     Info
    Sold by: netCUBED 
    Deployed on AWS
    Free Trial
    Browser based remote access tool that provides easy access to hosts in all your VPCs, across accounts and regions. Windows desktops and Linux hosts are supported. No client software needed, a modern browser is all you need.

    Overview

    Now with AWS SSO, SAML 2.0 and Cognito integration for Single-Sign on!

    Guacamole is a browser based remote access tool that provides easy access to hosts in all your VPCs, across accounts and regions. Access to Windows desktops (RDP), Linux terminals (SSH) and Kubernetes Pods is supported. No client software needed, a modern browser is all you need. This also enables administrators in corporate environments behind restrictive proxies to access remote servers on AWS.

    This product ships with version 1.5.5 of the popular open-source HTML5 RDP and SSH client Apache Guacamole and GuAWS, an agent that queries your AWS environment to automatically discover running instances.

    GuAWS is continuously scanning your VPC for new instances using the AWS API. It also scans across VPC, account and regional boundaries where VPC Transit Gateways or VPC Peering Connections are used. Your servers are organized by VPC and security group which makes it easy to find the right instance and manage access. Additionally, connections opened by users are logged to CloudWatch Logs.

    A user management system provides fine grained access control to individual groups or instances. Single sign-on authentication can easily be added through Amazon Cognito or other OpenID compliant providers such as Auth0, Okta or Duo. Multi-Factor authentication is provided by the built-in TOTP plugin that works with Google Authenticator or similar apps. Follow the Setup Instructions link in the sidebar for additional details.

    Highlights

    • AUTO DISCOVERY: Automatically discovers new resources in all your VPCs, cross-region, cross-account.
    • AUDIT LOGS: Every connection is logged to CloudWatch Logs for traceability and audit needs.
    • SINGLE SIGN-ON AND MFA: Enable Multi-Factor Authentication and Single Sign-On for a seamless and secure user experience.

    Details

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    AmazonLinux 2023

    Deployed on AWS

    Unlock automation with AI agent solutions

    Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
    AI Agents

    Features and programs

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Free trial

    Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.

    Guacamole Bastion Host

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (94)

     Info
    • ...
    Dimension
    Cost/hour
    m5n.large
    Recommended
    $0.08
    m5.4xlarge
    $0.46
    m4.4xlarge
    $0.499
    r5.24xlarge
    $2.66
    r5.large
    $0.092
    r3.xlarge
    $0.192
    m3.large
    $0.087
    r5a.xlarge
    $0.14
    t2.xlarge
    $0.119
    r5n.2xlarge
    $0.25

    Vendor refund policy

    We do not currently support refunds, but you can cancel at any time.

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Version release notes

    Additional details

    Usage instructions

    Access the application via a browser at https://[public_dns]/. The default user is guacadmin, the default password is the instance ID.

    Most browsers will display a certificate warning. This warning is letting you know that the certificate was self-signed instead of signed by a trusted Certificate Authority. You can safely ignore the warning as it doesn't impact the security of the connection by clicking on "Continue to this webpage" (Internet Explorer) or "Advanced" and then "Proceed to website" (Chrome).

    To connect to the underlying operating system of the EC2 instance connect via SSH with the username ec2-user.

    Support

    Vendor support

    For paid support, email sales@netcubed.de  for further information. Free support is provided via support@netcubed.de . For free support, we do not provide a guaranteed response time, however we do our best to respond to questions within one business day.

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    25
    In Migration
    Top
    10
    In Financial Services
    Top
    25
    In Application Development, Network Infrastructure

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    8 reviews
    Insufficient data
    Insufficient data
    11 reviews
    Insufficient data
    Insufficient data
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Resource Discovery
    Automatically discovers running instances across VPCs, accounts, and regions using AWS API scanning
    Remote Access Protocol Support
    Provides browser-based access to Windows desktops (RDP), Linux terminals (SSH), and Kubernetes Pods without client software
    Authentication Mechanism
    Supports multi-factor authentication with TOTP plugin and integration with OpenID compliant identity providers
    Access Control
    Implements fine-grained user management system with access control to individual groups and instances
    Connection Logging
    Logs user connection details to CloudWatch Logs for comprehensive audit and traceability
    Identity Threat Detection
    Advanced discovery and intelligence system for detecting identity-based threats across infrastructure
    Privileged Access Management
    Comprehensive control and management of privileged passwords, accounts, credentials, and sessions for human and machine identities
    Remote Access Security
    Granular control, management, and auditing of privileged remote access for employees, vendors, developers, and cloud operations engineers
    Endpoint Privilege Control
    Dynamic least privilege enforcement across Windows, macOS, Linux, and mobile platforms to prevent malware and unauthorized access
    Cloud Entitlement Management
    Cross-cloud visibility of access permissions, detection of account permission anomalies, and guidance for privilege optimization
    Traffic Management
    Intelligent L4-L7 load balancing with SSL/TLS offloading and programmatic traffic manipulation
    Network Security
    Multi-layered DDoS protection and comprehensive network security with advanced firewall management
    Application Protection
    Web application firewall (WAF) protection against OWASP top 10 attack types, L7 DoS, and bot attacks with regulatory compliance support
    Access Control
    Secure application authentication using SAML, OAuth, OIDC, SSL VPN, Single-Sign-On (SSO), and Multi-Factor Authentication (MFA)
    Global Server Load Balancing
    High-performance DNS services for directing globally distributed users to closest or best performing application servers

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4.3
    8 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    63%
    25%
    0%
    0%
    13%
    8 AWS reviews
    |
    2 external reviews
    Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
    Rakshana V

    Secure access is simplified with easy login for virtual machines

    Reviewed on Feb 20, 2025
    Review provided by PeerSpot

    What is our primary use case?

    I am provisioning virtual machines for educational institutions such as schools and colleges. The access to these virtual machines is provided via Apache Guacamole .

    What is most valuable?

    Apache Guacamole  is really easy to use. If I have ten virtual machines provisioned under my name, I can access them with a single login for each virtual machine with their respective credentials. Security concerns are addressed with separate logins for each virtual machine, ensuring complete security.

    What needs improvement?

    There should be good documentation regarding GUI customization. Even though I can try customizing the GUI, the documentation is not comprehensive.

    For how long have I used the solution?

    I have been using Apache Guacamole for approximately two years.

    What do I think about the stability of the solution?

    It is stable enough. The only requirement is to have good internet connectivity for stable access.

    What do I think about the scalability of the solution?

    Its scalability depends on the cloud. If the cloud is scalable, the virtual machines are scalable as well. In case of failures, the system can autoscale to other virtual machines.

    How are customer service and support?

    Apache has community support. Since I did not face significant issues, I haven't needed to reach out to them.

    How would you rate customer service and support?

    Positive

    How was the initial setup?

    The setup was easy and would take just about half an hour to complete the deployment.

    What's my experience with pricing, setup cost, and licensing?

    It is completely free of charge as it is an open-source solution.

    What other advice do I have?

    For those considering using Apache Guacamole, I wholeheartedly support its users since it's a free open-source software that is easy to download and use with no significant issues. 

    Overall, I rate Apache Guacamole a nine out of ten.

    Which deployment model are you using for this solution?

    Hybrid Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    Tom Rourke

    Fantastic customer support

    Reviewed on Apr 10, 2024
    Review from a verified AWS customer

    The customer support was very quickly and fixed our issue in less than 10 minutes. Thanks to Moritz Onken for helping

    reviewer2321814

    A stable and open-source solution that can be used as a gateway

    Reviewed on Dec 26, 2023
    Review provided by PeerSpot

    What is most valuable?

    I'm using Apache Guacamole as a gateway.

    What needs improvement?

    The solution's USB redirection could be improved. If the machine has a USB port, I'm not able to redirect it.

    The solution should include FX protocol instead of RDP.

    For how long have I used the solution?

    I have been using Apache Guacamole for five to six years.

    What do I think about the stability of the solution?

    Apache Guacamole is a pretty stable solution.

    What do I think about the scalability of the solution?

    Around 25 to 30 users are using Apache Guacamole in our organization.

    Which solution did I use previously and why did I switch?

    We previously used Citrix and decided to switch to Apache Guacamole because it's a free, open-source solution.

    What other advice do I have?

    We are using the latest version of Apache Guacamole. Only one administrator is required to manage the solution.

    Overall, I rate Apache Guacamole eight and a half out of ten.

    Sanjeevi Mahalingam

    Awesome inbuilt Guacamole setup within AMI

    Reviewed on Dec 15, 2021
    Review from a verified AWS customer

    This is one of the cool AMI to use for the Guacamole Application Deployment.

    The NetCUBED engineers are simply awesome. Whenever the customer needs their assistance then customer can receive the response instantly.

    Thanks,
    Sanjeevi Mahalingam

    Enthusiastic but Sorry Guacamole Bastion Host Trail user

    Could not log into EC2 instance in private subnet

    Reviewed on Jan 08, 2021
    Review from a verified AWS customer

    I wrote a simple user-data start-up script to

    1) Set "PasswordAuthentication yes" (this seemed to work)
    2) Set password for ec2-user. This password followed standard EC2 instance password policy.
    3) These commands were issued as su
    4) To be sure that my script was 100% correct, I ran similar commands to change/set the password and set "PasswordAuthentication yes" on my stand-alone Linux (Ubuntu) machine. Both the commands worked perfectly as expected

    With my (small) instance charges running high for test/trail purpose, having made many attempts with many permutations with no visibility into start-up (error/failure) log and with my Guacamole Bastion's trail period coming to an end within a day, I though that it would be best to cancel this subscription.

    View all reviews