WALLIX Bastion

What is WALLIX Bastion?

WALLIX Bastion is a European Privileged Access Management (PAM) platform - control, monitoring, and audit of privileged access. Session recording, password vault, workflow approvals. European vendor with GDPR compliance.

Main functions:

• Session Management - recording and audit of all admin sessions
• Password Vault - secure storage and password rotation
• Access Control - who, to what, when can access
• Workflow Approvals - just-in-time access approval

What Problem Does It Solve?

flowchart LR
    subgraph Without PAM
        A[Admin credentials] --> B[Shared passwords]
        B --> C[No audit]
        C --> D[Who did what?]
        D --> E[Compliance FAIL]
    end

    subgraph With WALLIX Bastion
        F[Centralized login] --> G[Session recording]
        G --> H[Full audit]
        H --> I[Who, what, when]
        I --> J[Compliance OK]
    end

    style A fill:#dc2626,stroke:#b91c1c,color:#fff
    style B fill:#dc2626,stroke:#b91c1c,color:#fff
    style C fill:#dc2626,stroke:#b91c1c,color:#fff
    style D fill:#dc2626,stroke:#b91c1c,color:#fff
    style E fill:#dc2626,stroke:#b91c1c,color:#fff
    style F fill:#22c55e,stroke:#16a34a,color:#fff
    style G fill:#22c55e,stroke:#16a34a,color:#fff
    style H fill:#22c55e,stroke:#16a34a,color:#fff
    style I fill:#22c55e,stroke:#16a34a,color:#fff
    style J fill:#22c55e,stroke:#16a34a,color:#fff

Common problems:

• Shared admin passwords - who did what?
• No administrative session recording
• Passwords in Excel/notes
• Compliance: GDPR, NIS2, KNF require audit
• External vendors with system access

How Does WALLIX Bastion Work?

flowchart TD
    A[Administrator] --> B[WALLIX Bastion]

    B --> C[Authentication]
    C --> D[AD/LDAP/MFA]

    B --> E[Authorization]
    E --> F[Role-based access]
    E --> G[Time-based access]
    E --> H[Approval workflow]

    B --> I[Session Proxy]
    I --> J[RDP Sessions]
    I --> K[SSH Sessions]
    I --> L[Web/Database]

    I --> M[Session Recording]
    M --> N[Video + metadata]
    M --> O[Searchable audit]

    style A fill:#6366f1,stroke:#4f46e5,color:#fff
    style B fill:#f59e0b,stroke:#d97706,color:#fff
    style I fill:#8b5cf6,stroke:#7c3aed,color:#fff
    style M fill:#22c55e,stroke:#16a34a,color:#fff

Key Features

Supported Protocols

Protocol	Functionality
RDP	Windows servers, full recording
SSH	Linux/Unix, command filtering
VNC	Remote desktop
Telnet	Legacy systems
HTTP/HTTPS	Web applications
Database	SQL sessions (Oracle, MSSQL, PostgreSQL)

Who Is It For?

WALLIX vs Competition

Aspect	WALLIX Bastion	CyberArk	BeyondTrust
Origin	European (France)	Israel/USA	USA
GDPR native	Yes	Requires configuration	Requires configuration
Deployment	On-prem, Cloud	On-prem, SaaS	On-prem, SaaS
Complexity	Medium	High	Medium
OT/SCADA focus	Strong	Medium	Medium
Price point	Mid-market	Enterprise	Enterprise

WALLIX Bastion advantages:

• European vendor = GDPR compliance by design
• Strong OT/SCADA support (energy, industry)
• Simpler deployment than CyberArk
• Polish language support
• Competitive pricing for mid-market

Specifications

Parameter	Value
Deployment	On-premises (VM/physical), Cloud
High Availability	Active-Active clustering
Protocols	RDP, SSH, VNC, Telnet, HTTP(S), SQL
Authentication	AD/LDAP, RADIUS, SAML, MFA
Integration	SIEM, ticketing (ServiceNow, Jira)
Certification	CC EAL3+, CSPN

FAQ

How does WALLIX differ from CyberArk? WALLIX is a European vendor (France), simpler deployment, better for mid-market. CyberArk is enterprise with more functionality but higher complexity and price.

Do session recordings take much space? WALLIX optimizes storage - video recording + metadata. Typically 10-50 MB/hour RDP session. Retention can be configured.

How does password vault work? Passwords are encrypted in vault. Admin logs into Bastion, Bastion automatically injects password into session. Admin never sees plaintext password.

Does it support MFA? Yes. WALLIX integrates with external MFA (RADIUS, SAML) or you can use WALLIX Trustelem as IDaaS.

Does nFlo deploy WALLIX? Yes. WALLIX Bastion deployments for banks, energy, industry. Session recording configuration, password vault, AD integration, workflow approvals.