# Agilicus Connector - Link: https://www.agilicus.com/anyx-guide/agilicus-connector/ - Published: 2024-05-14T00:24:59+00:00 - Author: Don Bowman 1. [Home](https://www.agilicus.com/) 2. Agilicus Connector ![Agilicus Connector](https://www.agilicus.com/www/01922948-connector-1024x538.png) Network Facilitator --- ## Agilicus Connector The Agilicus Connector facilitates connection from a bastion network and end-users. It installs on a device somewhere inside the protected network, making an outbound connection. ## Agilicus Connector Overview The Agilicus Connector facilitates connection from a bastion network and end-users. It installs on a device somewhere inside the protected network, making an outbound connection. If you are **new** to the system, you may try a full ‘demo’ setup with your own connector in a virtual enviroment in our system, with **no install**. See “[Agilicus AnyX Demo](https://www.agilicus.com/anyx-guide/agilicus-anyx-demo/)“. When you ‘create a connector’ it will offer you a ‘demo’ this will create a new virtual environment to test in with no isntall, no obligation. The Connector is self-updating. Once installed it will stay up to date. The live [Changelog](https://www.agilicus.com/www/releases/secure-agent/stable/CHANGELOG.md) shows the updates that have occurred. Connectors facilitate: * shares [must have local access to the files) * Web Applications (must have onward connectivity) * Local authentication * Network resources (e.g. SSH, Remote Desktop, VNC) ### Theory of Operation ![Zero-Trust SSH Data Flow](https://www.agilicus.com/www/fb11800f-ssh-flow.svg) The Agilicus Connector creates an outbound connection, using HTTPS, to the Agilicus AnyX Cloud. This persistent connection is then used to route individual user requests back in to the appropriate resource. Each individual inbound request first has the user identity checked (authentication), then has the user’s role (authorisation) checked, prior to being routed inwards. The net affect is that no traffic arrives at the protected resources unless it is for: * An authenticated user (optionally with multifactor authentication) * An authorised action (e.g. can the user edit the wiki) * A valid resource This is a very strong guarantee, and, achieved without complex (or any) firewall rules. The use of industry-standard HTTPS and WebSocket means inspecting firewalls such as Zscaler or PaloAlto can be used in the path. If we expand the data flow for a hypothetical SSH client with animation, we will see the WebSocket flows (blue) establish, and then the ssh flow. The SSH flow is delivered from User to SSH server encrypted end-to-end: the host key is maintained intact. [⌊SSH Animated Data Flow⌉⌊SSH Animated Data Flow⌉[ SSH Animated Data Flow ### High Availability Option The Agilicus Connector supports high availability (resiliency), either natively, or, via [Windows Clustering](https://www.agilicus.com/anyx-guide/agilicus-connector-windows-cluster/). See [High Availability](https://www.agilicus.com/anyx-guide/agilicus-connector-high-availability/) installation for more information. * [⌊Agilicus Connector – Container/Docker⌉⌊Agilicus Connector – Container/Docker⌉[ * ## 󠀁[Agilicus Connector – Container/Docker](https://www.agilicus.com/anyx-guide/agilicus-connector-container-docker-2/)󠁿 * Install an Agilicus Connector in a container (e.g. Docker) * [⌊Agilicus Connector – Export Certificate⌉⌊Agilicus Connector – Export Certificate⌉[ * ## 󠀁[Agilicus Connector – Export Certificate](https://www.agilicus.com/anyx-guide/agilicus-connector-export-certificate/)󠁿 * Have a local resource that should be properly TLS encrypted and publicly trusted certificate? The Agilicus Connector can facilitate this. * [⌊Agilicus Connector – GL-MT3000 (Beryl AX)⌉⌊Agilicus Connector – GL-MT3000 ( Beryl AX)⌉[ * ## 󠀁[Agilicus Connector – GL-MT3000 (Beryl AX)](https://www.agilicus.com/anyx-guide/agilicus-connector-gl-mt3000/)󠁿 * Install an Agilicus Connector on an OpenWRT-based GL-MT3000 Beryl AX * [⌊Agilicus Connector – Microsoft Windows⌉⌊Agilicus Connector – Microsoft Windows⌉[ * ## 󠀁[Agilicus Connector – Microsoft Windows](https://www.agilicus.com/anyx-guide/agilicus-connector-microsoft-windows/)󠁿 * Install and diagnose the Agilicus Connector on Microsoft Windows * [⌊Agilicus Connector – NanoPI R2S⌉⌊Agilicus Connector – NanoPI R2S⌉[ * ## 󠀁[Agilicus Connector – NanoPI R2S](https://www.agilicus.com/anyx-guide/agilicus-connector-nanopi-r2s/)󠁿 * Agilicus Connector and NanoPI R2S. 2xGE, 1GiB RAM, 32GB eMMC, large passive heatsink. An excellent small embedded platform. * [⌊Agilicus Connector – NanoPI R5S⌉⌊Agilicus Connector – NanoPI R5S⌉[ * ## 󠀁[Agilicus Connector – NanoPI R5S](https://www.agilicus.com/anyx-guide/agilicus-connector-nanopi-r5s/)󠁿 * Install an Agilicus Connector on an OpenWRT-based NanoPi R5S. * [⌊Agilicus Connector – QNAP⌉⌊Agilicus Connector – QNAP⌉[ * ## 󠀁[Agilicus Connector – QNAP](https://www.agilicus.com/anyx-guide/agilicus-connector-qnap/)󠁿 * Agilicus Connector – QNAP. Install the Agilicus connector on a QNAP NAS * [⌊Agilicus Connector – Snap⌉⌊Agilicus Connector – Snap⌉[ * ## 󠀁[Agilicus Connector – Snap](https://www.agilicus.com/anyx-guide/agilicus-connector-snap/)󠁿 * Install an Agilicus Connector on a Snap-based Ubuntu Core system. Agilicus Connector– Snap * [⌊Agilicus Connector Air Gap Machine With Containers⌉⌊Agilicus Connector Air Gap Machine With Containers⌉[ * ## 󠀁[Agilicus Connector Air Gap Machine With Containers](https://www.agilicus.com/anyx-guide/agilicus-connector-air-gap-containers/)󠁿 * Setup a host firewall to create a virtual airgap on a Linux machine running containers with the Agilicus connector. * [⌊Agilicus Connector High Availability⌉⌊Agilicus Connector High Availability⌉[ * ## 󠀁[Agilicus Connector High Availability](https://www.agilicus.com/anyx-guide/agilicus-connector-high-availability/)󠁿 * Install and Operate the Agilicus Connector in a high-availability, high-resilience mode. * [⌊Agilicus Connector Kubernetes⌉⌊Agilicus Connector Kubernetes⌉[ * ## 󠀁[Agilicus Connector Kubernetes](https://www.agilicus.com/anyx-guide/kubernetes-connector-install/)󠁿 * The Agilicus Connector includes a standard container-runtime and automatic installation for Kubernetes. This allows exposing internal Kubernetes services with an OpenID Conect Identity Proxy. Agilicus Connector Kubernetes * [⌊Agilicus Connector Mikrotik Router⌉⌊Agilicus Connector Mikrotik Router⌉[ * ## 󠀁[Agilicus Connector Mikrotik Router](https://www.agilicus.com/anyx-guide/agilicus-connector-install-mikrotik-routeros/)󠁿 * The MikroTik RB5009UG+S+IN is a small-form factor router. it is a good vantage point to run the Agilicus Connector. Agilicus Connector Mikrotik Router * [⌊Agilicus Connector Sign-In⌉⌊Agilicus Connector Sign-In⌉[ * ## 󠀁[Agilicus Connector Sign-In](https://www.agilicus.com/anyx-guide/connector-sign-in/)󠁿 * The Agilicus Connector creates a service account on installation, bootstrapped via a browser from the Administrator who is installing it. * [⌊Agilicus Connector Windows Cluster⌉⌊Agilicus Connector Windows Cluster⌉[ * ## 󠀁[Agilicus Connector Windows Cluster](https://www.agilicus.com/anyx-guide/agilicus-connector-windows-cluster/)󠁿 * Install the Agilicus Connector to be high-availability in a Microsoft environment. * [⌊Agilicus Connector in Private VPC In AWS EC2⌉⌊Agilicus Connector in Private VPC In AWS EC2⌉[ * ## 󠀁[Agilicus Connector in Private VPC In AWS EC2](https://www.agilicus.com/anyx-guide/agilicus-connector-in-private-vpc-in-aws-ec2/)󠁿 * Private IP only in your VPC? Need to ssh or remote desktop or share some files? This example shows a setup. * [⌊Cisco IOx Zero Trust Connector Install⌉⌊Cisco IOx Zero Trust Connector Install⌉[ * ## 󠀁[Cisco IOx Zero Trust Connector Install](https://www.agilicus.com/anyx-guide/cisco-iox-zero-trust-connector-install/)󠁿 * Cisco IOx Zero Trust . Configure a Cisco IR1101 IOx with Agilicus Connector. Zero Trust Remote Access to it, to IoT beyond it. * [⌊Connector Details Diagnostic Counters⌉⌊Connector Details Diagnostic Counters⌉[ * ## 󠀁[Connector Details Diagnostic Counters](https://www.agilicus.com/anyx-guide/connector-details-diagnostic-counters/)󠁿 * Diagnostic counters provide real-time visibility into the health of the AnyX connector, tracking network connectivity, cryptographic handshakes, and application traffic. Administrators use these statistics to pinpoint whether issues reside with back-end resources, internal networks, or the connector itself. Aggregated and per-resource metrics help teams maintain operational uptime and resolve failures within critical infrastructure. * [⌊Connector Install: GL-RM1 KVM⌉⌊Connector Install: GL-RM1 KVM⌉[ * ## 󠀁[Connector Install: GL-RM1 KVM](https://www.agilicus.com/anyx-guide/connector-install-gl-rm1-kvm/)󠁿 * The GL.iNet GL-RM1 is a simple, economical, remote Keyboard/Video/Mouse (KVM) device. It offers an excellent platform to install the Agilicus Connector, giving yourself remote access to a server from anywhere. * [⌊Connector Install: Netgate SG-1100 pfSense⌉⌊Connector Install: Netgate SG-1100 pfSense⌉[ * ## 󠀁[Connector Install: Netgate SG-1100 pfSense](https://www.agilicus.com/anyx-guide/connector-install-netgate-sg-1100-pfsense/)󠁿 * The Netgate SG-1100 pfSense is a small-form factor router. it is a good vantage point to run the Agilicus Agent Connector. * [⌊Connector Install: Raspberry Pi⌉⌊Connector Install: Raspberry Pi⌉[ * ## 󠀁[Connector Install: Raspberry Pi](https://www.agilicus.com/anyx-guide/agilicus-connector-install-raspberry-pi/)󠁿 * The Raspberry Pi makes an excellent platform to install the Agilicus Agent Connector. See the general instructions here. * [⌊Connector Install: Ubiquiti EdgeRouter X⌉⌊Connector Install: Ubiquiti EdgeRouter X⌉[ * ## 󠀁[Connector Install: Ubiquiti EdgeRouter X](https://www.agilicus.com/anyx-guide/agilicus-connector-install-ubiquiti-edgerouter-x/)󠁿 * The Ubiquiti EdgeRouter X (ER-X/ER-X SFP) is a small-form factor router. it is a good vantage point to run the Agilicus Agent Connector. * [⌊Linux, FreeBSD, Embedded Connector Install⌉⌊Linux, FreeBSD, Embedded Connector Install⌉[ * ## 󠀁[Linux, FreeBSD, Embedded Connector Install](https://www.agilicus.com/anyx-guide/generic-connector-install/)󠁿 * The instructions to install the Agilicus Agent Connector are nearly identical on various Unix operating systems. This includes desktops, servers, and embedded devices. * [⌊Moxa UC-8200 Zero-Trust Connector Install⌉⌊Moxa UC-8200 Zero-Trust Connector Install⌉[ * ## 󠀁[Moxa UC-8200 Zero-Trust Connector Install](https://www.agilicus.com/anyx-guide/moxa-uc-8200-connector-install/)󠁿 * Moxa UC-8200 Zero-Trust. Configure a Moxa UC-8200 Industrial PC with the Agilicus Agent Connector. * [⌊OpenWRT Connector Install⌉⌊OpenWRT Connector Install⌉[ * ## 󠀁[OpenWRT Connector Install](https://www.agilicus.com/anyx-guide/openwrt-connector-install/)󠁿 * Configure an OpenWRT Router with the Agilicus Agent Connector. * [⌊Phoenix Contact PLCnext AXC F 2152⌉⌊Phoenix Contact PLCnext AXC F 2152⌉[ * ## 󠀁[Phoenix Contact PLCnext AXC F 2152](https://www.agilicus.com/anyx-guide/phoenix-contact-plcnext-axc-f-2152/)󠁿 * Install the Agilicus connector directly on the Phoenix Contact PLCnext for highest security and simplest deployment. * [⌊SIEM Event Forwarding⌉⌊SIEM Event Forwarding⌉[ * ## 󠀁[SIEM Event Forwarding](https://www.agilicus.com/anyx-guide/siem-event-forwarding/)󠁿 * Restrictive firewalls often prevent critical infrastructure from sending logs to public cloud security information and event management platforms. The Agilicus AnyX connector enables safe egress forwarding through a server name indication inspecting proxy, connecting isolated devices without breaking encryption. By managing local domain name system resolution, operators ensure secure data flow while preventing threats like… * [⌊Sample Ubiquiti EdgeRouter-X EdgeMax Web Interface⌉⌊Sample Ubiquiti EdgeRouter- X EdgeMax Web Interface⌉[ * ## 󠀁[Sample Ubiquiti EdgeRouter-X EdgeMax Web Interface](https://www.agilicus.com/anyx-guide/sample-ubiquiti-edgerouter-x-edgemax-web-interface/)󠁿 * Sample Ubiquiti EdgeRouter-X EdgeMax Web Interface * [⌊Sample: Synology Local SSL⌉⌊Sample: Synology Local SSL⌉[ * ## 󠀁[Sample: Synology Local SSL](https://www.agilicus.com/anyx-guide/sample-synology-local-ssl/)󠁿 * No more snake-oil self-signed certificates, even on local lan. Let Agilicus AnyX connector automate the task. * [⌊Site To Site Transparent Layer 3 Tunnel⌉⌊Site To Site Transparent Layer 3 Tunnel⌉[ * ## 󠀁[Site To Site Transparent Layer 3 Tunnel](https://www.agilicus.com/anyx-guide/site-to-site-transparent-layer-3-tunnel/)󠁿 * Connect two sites in a layer-3 transparent fashion using the Agilicus Connector. * [⌊Synology Connector Install⌉⌊Synology Connector Install⌉[ * ## 󠀁[Synology Connector Install](https://www.agilicus.com/anyx-guide/synology-connector-install/)󠁿 * Configure a Synology NAS with the Agilicus Agent Connector. * [⌊WAGO Edge Controller⌉⌊WAGO Edge Controller⌉[ * ## 󠀁[WAGO Edge Controller](https://www.agilicus.com/anyx-guide/wago-edge-controller/)󠁿 * The WAGO Edge Controller is a flexible and open control platform for many embedded and industrial applications. It provides an excellent vantage point to run the Agilicus Connector. [Next Page](https://www.agilicus.com/anyx-guide/agilicus-connector/?output_format=markdown&query-16-page=2) ### Installation Installation of the connector is very simple: 3 steps. ![01](https://www.agilicus.com/www/40c531ca-01.svg) First, create (Admin console: Resources/Connectors/New) ![Managed Industrial Remote Access Solution by Agilicus: Securely connect to your industrial assets remotely. Learn how Agilicus helped [Customer Name - if available from case study] improve uptime and reduce costs with secure remote access to PLCs, HMIs, and other industrial equipment. Explore our managed remote access solutions for OT environments.](https://www.agilicus.com/www/d2bcda55-02.svg) Second, name (a name that means something, must be a valid hostname. E.g. the machine it is installed on, the site it connects, etc) ![Agilicus Managed Industrial Remote Access: Securely connect and manage remote industrial equipment with Agilicus. Visualize your network architecture with this diagram illustrating secure access points and data flow within your managed industrial environment.](https://www.agilicus.com/www/b6041fda-03.svg) Third, install (paste the command on the target machine) Once installed, the connector will keep itself up to date using [The Update Framework](https://www.agilicus.com/the-update-framework/). ![Windows Install](https://www.agilicus.com/www/5c2cce79-windows-install.svg) During the creation of the Connector you will give it a name. This name should have some meaning for you, e.g. the site it is installed in, the host it is installed on, etc. We recommend it be the hostname that is running the Connector. At this stage you will see a dialog giving installation instructions. At the top are 3 tabs (Linux, Windows-CMD, Windows-PowerShell). [⌊eec3f30e-image⌉⌊eec3f30e-image⌉[ [⌊connector-install-manual⌉⌊connector-install-manual⌉[ The Linux tab should work on most Linux or FreeBSD-derived hosts, including pfSense, OpenWRT, Ubuntu, Debian, Synology, etc. On a Windows host it does not matter which of the two instruction you follow, they will lead to the same result. Typically you will use the ‘**cmd**‘ instructions. In all 3 cases, copy the text box (using the blue-button at the bottom right) and paste it into an **administrative** shell. ### Uninstall / Delete When you no longer need an Agilicus Connector, you should first uninstall it from the host it is on. Then you may **delete** it from the Admin portal. Typically on Linux you will run: ```has-text-color sudo /usr/bin/agilicus-agent client --uninstall ``` Typically on Windows you will run: ```has-text-color "%ProgramFiles%\Agilicus\agent\agilicus-agent client" --uninstall ``` [⌊a7022a60-image⌉⌊a7022a60-image⌉[ ### Manual Download Typically the installation is done from the Agilicus Admin portal. This will give you a link per platform. In rare cases you may wish to manually download, the linux are below for convenience. NOTE: you will need a ‘code’ from the admin web interface to install (under Resources/Connectors/New). * [Linux X86_64](https://www.agilicus.com/www/releases/secure-agent/stable/agilicus-agent)( e.g. Ubuntu, Debian server) * [Linux ARM](https://www.agilicus.com/www/releases/secure-agent/stable/agilicus-agent-arm)( e.g. Synology NAS, OpenWRT) * [FreeBSD ARM](https://www.agilicus.com/www/releases/secure-agent/stable/agilicus-agent-freebsd-arm)( e.g. pfSense SG-1100) * [Linux MIPS Big Endian](https://www.agilicus.com/www/releases/secure-agent/stable/agilicus-agent-mipsbe)( e.g. OpenWRT etc. router) * [Linux MIPS Little Endian](https://www.agilicus.com/www/releases/secure-agent/stable/agilicus-agent-mipsle)( e.g. OpenWRT, Ubiquiti etc router) * [Linux PPC Big Endian](https://www.agilicus.com/www/releases/secure-agent/stable/agilicus-agent-ppc64be)( e.g. OpenWRT etc. router) * [Linux PPC Little Endian](https://www.agilicus.com/www/releases/secure-agent/stable/agilicus-agent-ppc64le)( e.g. OpenWRT, Ubiquiti etc router) * [Microsoft Windows](https://www.agilicus.com/www/releases/secure-agent/stable/agilicus-agent.exe) * [MacOS Darwin (X86-64)](https://www.agilicus.com/www/releases/secure-agent/stable/agilicus-agent-darwin-amd64) --- ## More Information Below you will see cards for specific aspects of the connector (theory of operation, installation onto various platforms such as pfSense, Mikrotik, OpenWRT, Windows, etc.) ---