Skip to content

Remote File System

SailPoint Entro integrates with your organization's remote machines - supporting both SMB and SFTP protocols to detect exposed secrets used in remote file systems. This integration provides continuous discovery and monitoring of credentials, API keys, and tokens stored within network shares and remote servers. By analyzing files and folders, SailPoint Entro prevents secret leakage and privilege escalation.

Onboarding Options

1. SMB File Shares

Use this option to connect to file share servers over SMB. This method supports authentication using service account credentials and allows scanning of accessible shared directories.

Required Fields:

  • Nickname

  • Host/IP of file share

  • Username and password

  • Worker Group (Connector)

Optional:

  • Excluded shares

Note

Best suited for Windows-based environments or when accessing shared network drives.

2. SFTP (SSH-based Access)

Use this method to connect directly to remote VM or server file systems using SFTP over SSH. This provides direct access to folders without requiring a file share setup.

Authentication Options:

  • SSH Private Key (recommended)

  • Password (if key is not available)

Required Fields:

  • Nickname

  • Host/IP of remote server

  • Username

  • Private Key or Password

  • Worker Group (Connector)

Optional fields:

  • Passphrase (When using private key)

  • Target Directories to scan

  • Target File extensions to scan

Note

Ideal for Linux/Unix-based environments or when working directly with cloud-hosted VMs

3. WinRM Onboarding

Use this method to connect directly to remote VM or server file systems using WinRM. This provides direct access to folders without requiring a file share setup.

Authentication Options:

  • Kerberos

  • SSH Private Key (recommended)

  • Password (if key is not available)

Required Fields:

  • Nickname

  • Host/IP of remote server

  • Username

  • Private Key or Password

  • Worker Group (Connector)

Optional fields:

  • Passphrase (When using private key)

  • Target Directories to scan

  • Target File extensions to scan

Note

Ideal for Microsoft-based environments or when working directly with cloud-hosted VMs