SSH, VNC & other protocols

Everything besides RDP: terminals, VNC, PowerShell remoting, web interfaces and your own programs.

Overview

Protocol	Default port	Implementation
RDP	3389	embedded mstsc – see RDP sessions
SSH	22	built-in terminal
Telnet · RAW	23	built-in terminal
Rlogin	513	PuTTY, embedded
VNC	5900	built-in VNC client
PowerShell	5985 / 5986	Enter-PSSession in an embedded console
HTTP · HTTPS	80 · 443	default browser
Ext. App	–	external tool, optionally embedded

SSH

The built-in terminal emulates a colour-capable xterm-256color and runs as a tab next to your RDP sessions. In the form you have:

Private key (SSH) – path to a key file. Without a password the app also tries the default keys from your .ssh folder.
Command after connecting – such as sudo -i or tmux attach.
The terminal's font size and SSH agent forwarding.

Host key checking: on the first connection the app shows the server's fingerprint and remembers it once you confirm. If the server later presents a different key, it clearly warns about a possible man-in-the-middle attack before anything is sent.

Telnet, RAW & Rlogin

Telnet logs in automatically when credentials are stored and the server asks with login: and Password: – handy for switches and older devices.
RAW opens a bare TCP connection, for example for serial console servers.
Rlogin runs through PuTTY in an embedded window. The app finds putty.exe by itself or takes the path from the settings; optionally you use a saved PuTTY session.

Telnet, RAW and Rlogin transmit unencrypted. Only use them in trusted networks.

Text to several terminals

In a terminal tab's context menu, “send text …” sends text to this session, and “send text to all terminal sessions …” sends the same text to every open SSH, Telnet and RAW session – for example to kick off an update on several servers at once.

VNC

The built-in VNC client speaks RFB 3.3, 3.7 and 3.8 with VNC authentication or without a password. Keyboard, mouse including the wheel and the clipboard work in both directions. Options:

Fit to window – scales while keeping the aspect ratio; off = 1:1 with scroll bars. Also switchable with the scale button.
View only – watch without sending input.
Shared session – other VNC viewers are not disconnected.

Classic VNC only encrypts the password challenge, not the picture. Over untrusted networks it belongs in a VPN or an SSH tunnel.

PowerShell

PowerShell connections open an embedded console with Enter-PSSession to the target. Port 5985 uses WinRM over HTTP, port 5986 over HTTPS (-UseSSL). The app hands over the credentials as a PSCredential – the password never appears on the command line. PowerShell remoting must be enabled on the target (Enable-PSRemoting).

HTTP & HTTPS

Web interfaces – hypervisor, firewall, switch, NAS – open in your default browser. The address is built from host, port and URL path, e.g. https://pve.example.com:8006/. This too is recorded in the session log.

External application

With the Ext. App protocol, an external tool itself becomes the session – for example WinSCP, a vendor client or a script. If “embed” is enabled for the tool, its window appears as a tab; the app fills variables such as %HOSTNAME% and %USERNAME% from the connection.