SPSA - Skillplan Secure Access¶

On-Premises Zero Trust Network Access Appliance

SPSA (Skillplan Secure Access) is a ready-to-run Zero Trust Network Access (ZTNA) appliance that provides secure remote access to your infrastructure without exposing services directly to the internet. Built on Apache Guacamole 1.6.0, SPSA delivers enterprise-grade security with European data sovereignty as a pre-configured virtual appliance.

Key Features¶

Secure Remote Access¶

• RDP - Remote Desktop Protocol for Windows systems
• SSH - Secure Shell for Linux/Unix systems
• VNC - Virtual Network Computing for cross-platform access
• Telnet - Legacy protocol support for specialized systems

Zero Trust Architecture¶

• No direct network exposure of target systems
• Lowest privileged access principle
• All connections brokered through secure gateway
• No VPN required

Multi-Factor Authentication¶

• Built-in MFA with standard TOTP authenticator apps
• Cisco DUO Authentication support
• Time-limited user access
• Active Directory Single Sign-On
• Entra ID / SAML integration with native Conditional Access Policies

Session Management¶

• Session recording and replay
• Real-time session monitoring
• Audit logging for compliance
• Connection time limits

Product Editions¶

SPSA is available in two editions to meet different organizational needs:

SPSA Foundation¶

Ideal for:

• Single-site deployments
• Enterprise environments with AD/Entra ID integration
• Compliance-driven organizations (NIS2, GDPR)
• Session recording and audit requirements
• Rapid deployment during security incidents
• Ransomware recovery scenarios

SPSA Pro¶

Designed for:

• Multi-site deployments with distributed SPSA Proxies (up to 5)
• Organizations requiring site-to-site VPN connectivity
• Geographically distributed infrastructure

Multi-Site Architecture (SPSA Pro)

SPSA Pro supports up to 5 SPSA Proxies (guacd implementations) connected via integrated Multi-Site VPN to the central SPSA Portal, enabling secure access to geographically distributed infrastructure from a single management interface.

Use Cases¶

Active Directory Protection¶

Secure administrative access to domain controllers without exposing RDP to the network.

Disaster Recovery¶

Pre-configured emergency access for critical systems during ransomware or security incidents.

Remote Maintenance¶

Enable vendors and contractors to access specific systems with time-limited credentials.

Legacy System Isolation¶

Provide secure access to legacy systems that cannot be updated or hardened.

Jump Host Replacement¶

Replace traditional jump servers with a more secure, auditable solution.

RDP Security Hardening¶

Eliminate direct RDP exposure by proxying all connections through SPSA.

Architecture Overview¶

SPSA acts as a secure broker between users and target systems:

1. Users connect to SPSA via HTTPS (port 443)
2. SPSA Gateway authenticates users and enforces access policies
3. Target Systems receive connections only from the SPSA gateway
4. No direct network path exists between users and target systems

Technology¶

SPSA is built on Apache Guacamole 1.6.0, an open-source clientless remote desktop gateway. The appliance includes:

All administration and management is performed through the SPSA Portal web interface. The underlying infrastructure is pre-configured and secured - no manual Docker or database setup required.

SPSA Architecture¶

Compliance & Data Sovereignty¶

• 100% European Product - Developed and hosted in Switzerland
• No Cloud Data Storage - All data remains on-premises
• NIS2 Compliant - Meets EU cybersecurity directive requirements
• GDPR Ready - Full compliance with EU data protection regulations
• Audit Trail - Complete logging for compliance reporting

Getting Started¶

Ready to deploy SPSA in your environment?

1. Review System Requirements - Ensure your infrastructure meets the prerequisites
2. Quick Start Guide - Get up and running
3. Installation Guide - Detailed deployment instructions
4. Configuration Guide - Set up authentication and connections

Support & Contact¶